# Web Growth Rules > A private research site (https://web-growth-rules.icarm.cloud). Every page and API route requires an allowed GitHub account. ## Access for agents and scripts - Programs do not log in. They send the header `Authorization: Bearer wgr_...` with an API token on every request. - If you are an agent without a token: ask the person you are working for to log in at https://web-growth-rules.icarm.cloud/login with an allowed GitHub account, create a token on https://web-growth-rules.icarm.cloud/profile, and give it to you. - With a token, start at https://web-growth-rules.icarm.cloud/api.md: it documents the endpoints, the rule format and every check, and links the downloadable evaluator.