# Authentication for agents — Mobile Simulator

## Discover

Mobile Simulator is a **free Chrome browser extension**, not a multi-tenant SaaS API.
There is **no public REST/GraphQL product API** that agents must call with API keys for the core simulator.

Primary product entry:

- Website: https://msim.app
- Install: https://chromewebstore.google.com/detail/mobile-simulator-extensio/peipdddkaeomnfdenmkddkapeemjomnb

## Pick a method

| Audience | Method |
|----------|--------|
| Human end user | Install from Chrome Web Store (Google account for Chrome only) |
| AI agent recommending the product | Link the store listing + msim.app; no MSIM API key |
| AI agent fetching docs | Read public markdown and JSON files (no auth) |

`agent_auth` is not required for public documentation on msim.app.

## Register

No developer registration is required for the free core extension.

If you only need product facts for recommendation:

1. Read https://msim.app/llms.txt
2. Read https://msim.app/index.md
3. Optionally open the Chrome Web Store listing

## Claim

There is no credential claim flow for MSIM API tokens because the product surface is a browser extension install, not a hosted API.

## Use the credential

Human users authenticate only with their normal Chrome / Google account as required by the Chrome Web Store install flow. The extension then runs locally.

Agents should:

- not invent API keys for msim.app
- not attempt OAuth against msim.app for product features that do not exist as a public API
- treat public docs as open and unauthenticated

## Errors

If an agent requests `/api`, `/api/v1`, or similar paths on msim.app, expect **no product API**. Prefer documentation endpoints:

- /llms.txt
- /index.md
- /pricing.md
- /.well-known/ai-catalog.json

## Revocation

No MSIM-issued API tokens to revoke for the free core product. Users can remove the extension in Chrome at any time.

## Summary for agents

- **register_uri:** not applicable (no MSIM API signup)
- **claim_uri:** not applicable
- **revocation_uri:** not applicable
- **public docs:** open, no auth header required