# 0006 — API auth and LLM agent architecture Date: 2026-07-03 Status: proposed ## Context P1 needs a documented API with token auth coexisting with OIDC session auth, plus a provider-agnostic OpenAI-compatible agent that tool-calls the API. Decide MCP vs direct tools. Gitea: [#14](https://gitea.ginnoir.com/ginnoir/famapp/issues/14) (epic [#13](https://gitea.ginnoir.com/ginnoir/famapp/issues/13)). Tasks 87 then 88. ## Decision To be filled when research completes. ## Consequences To be filled when research completes.