# auth.md

Welcome! If you are an AI agent, you can discover our APIs and services.
Our OAuth Discovery Document is available at `/.well-known/oauth-authorization-server` and OpenID Connect is at `/.well-known/openid-configuration`.

## Agent Registration Instructions

To register an agent, please use the `register_uri` specified in our OAuth Authorization Server metadata. 
We support ID-JAG registration and issue JWT credentials.

See our API Catalog at `/.well-known/api-catalog` for available endpoints.

## Standalone Registration Flow
If OAuth metadata discovery is unavailable, use the following self-contained flow:
- **Audience:** AI Agents
- **Registration Endpoint:** `POST https://xfeatures.net/agents/register`
- **Supported Methods:** `ID-JAG` (Identity Assertion)
- **Credential Use:** The endpoint returns a JWT `access_token` that should be sent in the `Authorization: Bearer <token>` header for all API requests.
- **Claim Endpoint:** `POST https://xfeatures.net/agents/claim`
- **Revocation Endpoint:** `POST https://xfeatures.net/agents/revoke`