---
title: "Authentication"
canonical: "https://marcostolk.nl/auth.md"
---

# Authentication

## Overview
The service catalog and MCP are public and read-only. Authentication: none. No signup, API key, OAuth token, payment or credentials are required. Do not send passwords or personal customer data.

## Quick start
GET https://marcostolk.nl/api/v1/services.json without an Authorization header. A successful request returns HTTP 200 and the complete service catalog. MCP clients initialize https://marcostolk.nl/mcp and call get_service_catalog with empty arguments.

## Permissions
Only public services, prices and contact information can be read. Booking, sending messages, payments and access to customer records are not supported. The WordPress administrator login is separate and is not an agent integration.

## Errors and recovery
For 404 check the URL; for 405 use GET for REST or POST for MCP. For 429 wait the Retry-After interval. Rate limit: 60 requests per IP address per minute, shared across REST and MCP. No token refresh or credential acquisition flow exists or is needed. Contact: https://marcostolk.nl/#contact.