Vendor · Discovery
auth.md
A Markdown file at /auth.md, plus an agent_auth block in the service's OAuth metadata, that tells an agent how to register with a service on a user's behalf and obtain scoped tokens.
PublishedOpen protocol published by WorkOS; not under a standards bodyCanonical documentauth-md
Revisions
- 2026-05current
Relations 4
auth.md builds on 1
- OAuth 2.0 Protected Resource MetadatapublishedPlaces the agent_auth block in the protected resource and authorization server metadata.Source
auth.md references 2
- OAuth 2.0 Authorization Server MetadatapublishedThe agent_auth block is also carried in the authorization server metadata.Source
- Identity Assertion JWT Authorization GrantWG draftIts "agent verified" registration path uses the identity assertion grant.Source
auth.md solves the same problem as 1
- OAuth 2.0 Dynamic Client Registration ProtocolpublishedBoth answer how a client nobody registered gets credentials. Dynamic registration is a generic API; auth.md is a human- and agent-readable file plus metadata aimed at agents signing up for a service on a user's behalf.
Defines in the shared model
No features of this document are recorded yet. Features are what the atlases observe and the explorer cites; they are added as the products need them.