# Authentication — Photo2Vector

Photo2Vector's API is **public and does not require authentication,
registration, API keys or OAuth tokens**.

## How to call the API

Send requests directly to the endpoints described in the
[OpenAPI spec](/openapi.json) and [interactive docs](/docs).
The main entry point is `POST /api/process/stream` (multipart upload,
Server-Sent Events response).

## Limits

- Per-IP rate limiting applies. On HTTP 429, back off and retry later.
- Uploads: JPG, PNG or WebP images.
- Job files are automatically deleted 24 hours after processing.

## Machine-readable discovery

- API catalog (RFC 9727): [/.well-known/api-catalog](/.well-known/api-catalog)
- Agent skills index: [/.well-known/agent-skills/index.json](/.well-known/agent-skills/index.json)

There are no protected resources, so no OAuth authorization server or
protected resource metadata is published.