# ChainRay Auth.md — Authentication and payments

ChainRay does not require an account, API key, OAuth login, or OIDC token. Public discovery and MCP capability inspection are available without credentials.

Direct paid HTTP requests use the x402 payment protocol and settle in USDC on Base. The payment proof authorizes the individual request; it is not an account session. MCP transport is publicly discoverable and subject to the published per-client capacity policy.

Do not send private keys or wallet seed phrases to ChainRay. A payment client signs its own x402 authorization locally.