# auth.md

You are an agent. This service supports **agentic registration** to authenticate and communicate with 0XHODLER API services.

## Discovery

Our authorization server metadata and API definitions are fully discoverable at these well-known paths:

- **OAuth Protected Resource:** https://www.0xhodler.nl/.well-known/oauth-protected-resource
- **OAuth Authorization Server:** https://www.0xhodler.nl/.well-known/oauth-authorization-server
- **API Catalog:** https://www.0xhodler.nl/.well-known/api-catalog

## Supported Methods

We support standard agentic authentication methods:

1. **`identity_assertion`:** Submit a verified ID-JAG token from a trusted identity provider.
2. **`anonymous`:** Register as an anonymous session, then claim identity later if needed.

## Endpoints

```json
{
  "issuer": "https://www.0xhodler.nl",
  "token_endpoint": "https://www.0xhodler.nl/api/oauth2/token",
  "agent_auth": {
    "skill": "https://www.0xhodler.nl/auth.md",
    "register_uri": "https://www.0xhodler.nl/api/agent/identity",
    "claim_uri": "https://www.0xhodler.nl/api/agent/identity/claim",
    "revocation_uri": "https://www.0xhodler.nl/api/agent/identity/revoke",
    "identity_types_supported": ["anonymous", "identity_assertion"],
    "anonymous": {
      "credential_types_supported": ["api_key"]
    },
    "identity_assertion": {
      "assertion_types_supported": [
        "urn:ietf:params:oauth:token-type:id-jag",
        "verified_email"
      ],
      "credential_types_supported": ["access_token", "api_key"]
    }
  }
}
```

Please refer to the full `auth.md` specification to initiate authentication or registration flows.
