---
title: "Agent & API Authentication Guide | BlissTech7 Solutions"
description: "Specification guide for AI agents, developers, and automated tools accessing BlissTech7 Solutions resources and APIs."
canonical: "https://blisstech7solutions.in/auth.md"
last-updated: "2026-09-10"
---

# Authentication & API Access Guide — BlissTech7 Solutions

This document describes how autonomous agents, developers, and integrated systems obtain authorization to interact with BlissTech7 Solutions public and client services.

## Discover
- Public web tools (44+ browser tools) and production demos require **no authentication** (open access).
- Client portal APIs, society management endpoints, and clinic records require scoped authorization tokens.
- Protected resource metadata is discoverable via RFC 9728 and standard headers.

## Pick a Method
BlissTech7 Solutions supports two primary machine authorization schemes:
1. **Anonymous Read Access**: Read-only discovery files (`llms.txt`, `sitemap.xml`, `pricing.md`, `ard.json`, client-side tools) do not require credentials.
2. **Bearer Token Authentication (`service_auth`)**: For programmatic access to client software management APIs (Gym Connect, Care Connect, Apla Parivar), agents present a pre-shared API bearer token.

## Register & Claim
To register an integration or obtain testing credentials:
1. Contact administrator at `blisstech7solutions@gmail.com` or via https://blisstech7solutions.in/contact.html.
2. Specify the target application (Gym Connect, Care Connect, or Apla Parivar).
3. The platform issues a scoped, revokable service API key.

## Use the Access Token
Agents must pass the token in the HTTP `Authorization` header:
```http
GET /api/v1/resource HTTP/1.1
Host: blisstech7solutions.in
Authorization: Bearer <your_api_token>
Accept: application/json
```

## Errors
- `401 Unauthorized`: Missing or invalid Bearer token.
- `403 Forbidden`: Token lacks the necessary scope for the requested operation.
- `404 Not Found`: Resource does not exist (returns agent-friendly markdown recovery).
- `429 Too Many Requests`: Exceeded rate limit (100 requests per minute per IP for public endpoints).

## Revocation & Security
Tokens can be instantly revoked by contacting `blisstech7solutions@gmail.com`. Never share tokens in client-side script bundles.