generated: '2026-08-09'
method: searched
source: https://waodao.ai/ai-agents#api-access
docs: https://waodao.ai/ai-agents
summary:
  types: [none]
  api_key_in: []
  oauth2_flows: []
  public: true
schemes: []
posture:
  authentication_required: false
  statement: >-
    "The API is public and free to read: no account, API key, payment, or authentication is
    required. CORS is enabled." — WAODAO AI agent documentation (api-access section) and
    llms.txt Access Notes.
  cors:
    enabled: true
    header: 'Access-Control-Allow-Origin: *'
    observed: true
  spec_evidence: >-
    openapi/waodao-agent-api-openapi.json declares an empty root `security: []` and an empty
    `components.securitySchemes`, which matches the documented no-auth posture rather than
    indicating an undocumented scheme.
  scopes: none
  note: >-
    All five operations are read-only GETs over public NFT/ArtChain metadata and public on-chain
    pool registry data, so there is no OAuth scope surface. scopes/ is intentionally absent.
contact: info@waodao.ai
cross_links:
  conventions: conventions/waodao-conventions.yml
  conformance: conformance/waodao-conformance.yml
  openapi: openapi/waodao-agent-api-openapi.json
x-evidence:
  - {url: 'https://waodao.ai/ai-agents', http_status: 200}
  - {url: 'https://waodao.ai/llms.txt', http_status: 200}
  - {url: 'https://waodao.ai/api/v1/waodao/index', http_status: 200, note: 'returned 200 with no credentials; access-control-allow-origin: *'}