# Tours Finance auth.md

Tours Finance provides public verification endpoints and dedicated single-tenant financial vaults for safari operators, DMCs, and travel agencies.

## Audience & Capabilities

Autonomous AI agents can interact with Tours Finance in two modes:

1. **Public Verification & Onboarding Mode (Anonymous / Unauthenticated)**
   - Verify SHA-256 cryptographic document hashes on stamped invoices, client deposit receipts, and dual-signed field vouchers via `GET https://toursfinance.com/public/v1/verify/{docHash}`.
   - Submit operator vault provisioning inquiries via `POST https://toursfinance.com/public/v1/inquiries`.
2. **Authenticated Operator Vault Mode (Bearer Token / Session)**
   - Operator API requests require an `Authorization: Bearer <token>` header issued by the operator's isolated tenant vault authorization server (`https://toursfinance.com`).

## Agent Registration & Provisioning

- **Discovery Metadata**: `https://toursfinance.com/.well-known/oauth-authorization-server`
- **Protected Resource Metadata**: `https://toursfinance.com/.well-known/oauth-protected-resource`
- **Registration / Provisioning Endpoint**: `POST https://toursfinance.com/public/v1/inquiries`
- **Supported Identity Types**: `identity_assertion` (`verified_email`), `anonymous`
- **Supported Credential Types**: `bearer_token` (passed via `Authorization: Bearer <token>`)