# Yeti Hikes — Agent & Automated Access Guidance

> Official access and machine authentication policy for autonomous agents, crawlers, and programmatic clients accessing Yeti Hikes (https://yetihikes.com).
> Last Updated: 2026-10-19

## 1. Public Resources (No Authentication Required)
The following public travel resources and machine-readable discovery documents are freely accessible over canonical HTTPS without authentication, API keys, or pre-registration:

- **LLM Context & Knowledge Base**: [https://yetihikes.com/llms.txt](https://yetihikes.com/llms.txt) (and [https://yetihikes.com/llms-full.txt](https://yetihikes.com/llms-full.txt))
- **Agent Skills Discovery Index**: [https://yetihikes.com/.well-known/agent-skills/index.json](https://yetihikes.com/.well-known/agent-skills/index.json)
- **Agent Resource Catalog (ARD)**: [https://yetihikes.com/.well-known/ai-catalog.json](https://yetihikes.com/.well-known/ai-catalog.json)
- **XML Sitemap**: [https://yetihikes.com/sitemap.xml](https://yetihikes.com/sitemap.xml)
- **Robots Directives & Content Signals**: [https://yetihikes.com/robots.txt](https://yetihikes.com/robots.txt)
- **Public Trek Packages & Itineraries**: [https://yetihikes.com/packages](https://yetihikes.com/packages)
- **Destinations & Regional Guides**: [https://yetihikes.com/destinations](https://yetihikes.com/destinations)
- **Travel Blog & Preparation Guides**: [https://yetihikes.com/blogs](https://yetihikes.com/blogs)
- **Interactive AI Travel Pathfinder**: [https://yetihikes.com/ai-pathfinder](https://yetihikes.com/ai-pathfinder)

## 2. Programmatic Authentication & Agent Registration Status
- **Automated Agent Registration**: **Not Currently Supported**. Yeti Hikes does not provide an automated agent onboarding or self-service token generation endpoint.
- **Public OAuth 2.0 / OpenID Connect**: **Not Operated**. Yeti Hikes does not run a public OAuth authorization server or OIDC provider (`/.well-known/openid-configuration` and `/.well-known/oauth-authorization-server` are intentionally not published).
- **Direct API Keys**: **Not Publicly Distributed**. There are no self-service programmatic API keys available for general public scraping.
- **Client & Customer Authentication**: Customer and administrative accounts use first-party browser sessions with CSRF protection, rate limiting, and secure password hashing. Headless account creation or credential stuffing by automated agents is strictly prohibited.

## 3. Commercial & Integration Inquiries
If you represent an AI platform, travel booking aggregator, search provider, or research organization seeking structured API access, verified real-time departure feeds, or commercial partnership:
- **Email**: `yetihikes790@gmail.com`
- **Phone / WhatsApp**: `+977-9851316676`
- **Inquiry Form**: [https://yetihikes.com/contact](https://yetihikes.com/contact)
- **Corporate Address**: Yeti Hikes Pvt. Ltd., Thamel Marg, Ward No. 26, Kathmandu, Nepal

## 4. Acceptable Use, Rate Limiting & Content Signals
- **Identification**: Autonomous agents and crawlers must declare an accurate and descriptive `User-Agent` header including the platform name and contact URI/email.
- **Content Signals**: Yeti Hikes enforces `Content-Signal: search=yes, ai-train=no, ai-input=yes` via `robots.txt`:
  - `search=yes`: Search engine indexing and result snippet presentation are permitted.
  - `ai-input=yes`: RAG pipelines, real-time conversational assistants, and travel question answering using Yeti Hikes public facts are permitted with source attribution.
  - `ai-train=no`: Ingestion of Yeti Hikes proprietary trekking guides, photography, and itineraries for foundational model training or weights fine-tuning without prior licensing is strictly prohibited.
- **Rate Limiting**: Automated requests are monitored and rate-limited at the Cloudflare edge. Aggressive request volumes that degrade origin service for human travelers will trigger automated IP mitigation.
- **Data Integrity**: Published pricing, itinerary details, difficulty ratings, and safety precautions must be reflected accurately without alterations when presented to users.