# Dr. Ezgi Söylemez — Authentication and public API access

## Discover

Base URL: https://drezgisoylemez.com. This is a public, read-only clinic information API. No authentication required.
Read the [OpenAPI contract](https://drezgisoylemez.com/openapi.json) and [API documentation](https://drezgisoylemez.com/docs). The OpenAPI root and both GET operations declare `security: []`.

## Pick a method

Use anonymous HTTPS GET requests. No API key, OAuth token, Authorization header, cookie, user account, or login is required. HEAD returns the same headers without a body; OPTIONS supports browser preflight.

## Register

Registration is not required and no registration endpoint exists. Go directly to the public endpoints below.

## Claim and exchange

There is no identity claim, token exchange, or access_token to obtain. This API does not implement an OAuth authorization server or agent registration protocol.

## Use the API

These requests require no credentials and return HTTP 200 with Content-Type: application/json:

```sh
curl --fail https://drezgisoylemez.com/api/public/profile
curl --fail https://drezgisoylemez.com/api/public/topics
```

- [GET /api/public/profile](https://drezgisoylemez.com/api/public/profile): clinic name, official URL, telephone, address, and data-use boundaries.
- [GET /api/public/topics](https://drezgisoylemez.com/api/public/topics): names and canonical URLs of published information topics.
- API-Version: 1 is optional. Omitting this request header selects the current version 1.

## Permissions and scopes

Only published public information is readable. No OAuth scopes or privileged permissions exist. The API does not offer writes, accounts, patient records, appointment creation, or payments. Never send personal health data or credentials to these endpoints.

## Errors

API errors use application/problem+json with type, title, status, code, detail, and documentation fields.
- 400 unsupported_api_version: an unsupported API-Version value; use version 1 or omit the header.
- 404 not_found: an unknown /api/public/ path; use one of the two documented endpoints.
- 405 method_not_allowed: a write method on a public endpoint; use GET or HEAD.
These public endpoints do not issue an authentication challenge. A 404 or 405 is not a request to log in.

## Revocation

No credential is issued, so there is no token revocation or rotation step. Stop sending requests to stop using the API. Public information remains available to other readers.

## Version lifecycle

Version 1 is active. See the [version lifecycle and deprecation policy](https://drezgisoylemez.com/docs) for change notices. No version is currently scheduled for retirement.