# RentReboot auth.md

RentReboot supports anonymous access to public MCP tools and OAuth 2.1 delegated access to the connected renter's own account: their alerts, saved search, and Housing Lottery status.

## Public access without authentication

The following MCP capabilities are public and do not require an account:

- Search and retrieve published renter guides.
- List neighborhoods with published RentReboot rent data.
- Retrieve aggregate neighborhood asking-rent percentiles and sample sizes.

Public MCP endpoint: `https://rentreboot.com/api/mcp`

## Personal access

A renter may connect their RentReboot account through RentReboot's OAuth authorization page. The renter signs in with a 6-digit code that RentReboot emails to them. A person with no RentReboot account can create a free account on the same page: the emailed code proves they own the address, and no account is created without it. Closed accounts (unsubscribed, bounced, or deleted) are never reopened from this page. The verified-email signup and account tools are available in ChatGPT and Claude. The authorization page runs on `rentreboot.com`; private credentials are never tool arguments and must never be pasted into a chat.

### Read scopes

- `alerts:read`: view apartments previously sent in RentReboot alerts, with the renter's saved, hidden, and contacted/toured/applied state.
- `searches:read`: view the renter's plan, saved search, neighborhood names for their market, and historical apartments matching their search.
- `lottery:read`: view provider-confirmed Housing Connect application names, areas, statuses, submission dates, and deadlines.

### Write scopes

- `alerts:write`: save, hide, or mark contacted/toured/applied an apartment that was sent to the renter.
- `preferences:write`: change the renter's saved search and alert delivery, and pause or resume apartment alerts. Changes use the same rules as the RentReboot preferences page. A new account chooses its market once, with its first neighborhoods; after that the market cannot change here.
- `billing:write`: create a 15-minute link to RentReboot checkout when the renter asks to upgrade. Nothing is charged by a tool; the renter pays on a Stripe page they confirm. This tool is not offered in ChatGPT.

No scope can delete an account, unsubscribe, cancel or change a paid plan, submit a Housing Connect application, message a broker, or create a listing.

### Limits

Personal tools act only on the connected renter's account. Alert history pages hold at most 25 apartments and reach back 200 alerts. Upcoming matches return at most 25 apartments for the renter's own saved search. Each account has hourly and daily limits on reads, search changes, and listing updates.

## Data minimization

Personal MCP responses do not return email addresses, phone numbers, account or subscription identifiers, authentication tokens, broker contact details, Housing Connect credentials, application numbers, income, household details, dates of birth, documents, or internal/debug identifiers.

## OAuth metadata

- Protected resource metadata: `https://rentreboot.com/.well-known/oauth-protected-resource`
- Authorization server metadata: `https://rentreboot.com/.well-known/oauth-authorization-server`
- Authorization endpoint: `https://rentreboot.com/api/mcp/oauth/authorize`
- Token endpoint: `https://rentreboot.com/api/mcp/oauth/token`
- Dynamic client registration: `https://rentreboot.com/api/mcp/oauth/register`

The flow uses authorization code + PKCE (`S256`). Access tokens last one hour, are audience-bound to the RentReboot MCP resource, and are scope-checked on every personal tool call. Refresh tokens last 90 days, and each refresh checks again that the account is still active.

Listing links in personal responses open through `rentreboot.com/r/...`, like the links in the renter's alert emails, so the source site is not exposed.

## Human account access

- Renter provisioning: `GET https://rentreboot.com/get-started`
- Broker sign-in: `GET https://rentreboot.com/broker/login`
- Existing renter management: the private preference link RentReboot sends to the renter's verified email address

Registration, payment, cancellation, account deletion, application submission, and broker workflows remain human-supervised web flows.

## Legal and support

- Terms: https://rentreboot.com/terms
- Privacy: https://rentreboot.com/privacy
- Support: support@rentreboot.com