# auth.md

## Agent Registration

This site supports AI agent authentication via OAuth 2.0. Agents can register
and obtain credentials to access protected resources on https://elevate3m.com.

### How to Register

1. Send a POST request to the registration endpoint:
   ```
   POST https://elevate3m.com/register
   Content-Type: application/json
   ```

2. Discover OAuth metadata automatically at:
   - `https://elevate3m.com/.well-known/oauth-authorization-server`
   - `https://elevate3m.com/.well-known/oauth-protected-resource`

### agent_auth

The `agent_auth` block in `/.well-known/oauth-authorization-server` contains:

- `register_uri`: https://elevate3m.com/register
- `supported_identity_types`: user_delegated, service
- `supported_credential_types`: authorization_code, refresh_token, client_credentials
- `claims_endpoint`: https://elevate3m.com/oauth/claims
- `revocation_endpoint`: https://elevate3m.com/oauth/revoke

### Supported Identity Types

- **user_delegated**: The agent acts on behalf of a human user.
- **service**: The agent acts as an autonomous service.

### Supported Credential Types

- **authorization_code**: Standard OAuth 2.0 authorization code flow.
- **refresh_token**: Refresh tokens for long-lived access.
- **client_credentials**: Client credentials for service-to-service access.

### Endpoints

| Endpoint | URL |
|---|---|
| Authorization | `https://elevate3m.com/oauth/authorize` |
| Token | `https://elevate3m.com/oauth/token` |
| Registration | `https://elevate3m.com/register` |
| Claims | `https://elevate3m.com/oauth/claims` |
| Revocation | `https://elevate3m.com/oauth/revoke` |
| JWKS | `https://elevate3m.com/.well-known/jwks.json` |

### Contact

For questions about agent authentication, contact: ruben.r.workout@gmail.com