diff --git a/Management/appsettings.json b/Management/appsettings.json
index b21e02b..191e4e4 100644
--- a/Management/appsettings.json
+++ b/Management/appsettings.json
@@ -47,6 +47,21 @@
    *   3. Grant admin consent
    *   4. Create a client secret → copy value → set Graph__ClientSecret env var
    */
+  /*
+   * REGISTRATION API — called by RegistrationClient (typed HttpClient).
+   * Management proxies /api/registration/* to this service.
+   *
+   * BaseUrl:     Registration ASP.NET Core container, proxied via nginx.
+   *              Set via env var: Registration__BaseUrl
+   * FunctionKey: Shared secret validated by ApiKeyAuthFilter on admin endpoints.
+   *              Set via env var: Registration__FunctionKey
+   *              Must match Registration:FunctionKey on the RegServer.
+   */
+  "Registration": {
+    "BaseUrl": "https://portal.positivespend.com/api",
+    "FunctionKey": ""
+  },
+
   "Graph": {
     "TenantId": "f56a3c51-9b5c-4356-920f-b4dcf932a96b",
     "ClientId": "b0f29246-91e7-4615-96db-5de9b6f8da2e",