# Authentication

מפתחים מחוץ לקופסה's public content API and MCP servers do not require authentication. They expose only public, read-only catalogue data.

- No API key
- No OAuth flow
- No signup
- No cookies or user tokens

Call `https://outside-the-box.dev/api/v1` or POST JSON-RPC 2.0 to `https://outside-the-box.dev/mcp` directly. Rate-limit headers apply to all API responses.