Loading page
Draft protocol
A draft open protocol for how agents register with an application, discover the flows it supports, request scopes, and receive credentials that expire.
Working draft — not implemented
auth.md is published for discussion. Nothing in Paycux serves or reads an auth.md document today, and the agent-registration product that would is planned. What Paycux provides today
An agent arriving at an application has no way to ask what it is allowed to do or how to ask for it. Every integration is bespoke, which means every integration is a new place to get authorization wrong.
auth.md is a small, readable document an application publishes describing how agents register, which flows it supports and which scopes exist. It is designed to be read by a model and by a person.
The document format, the discovery location, the registration exchange and the shape of a scope request. Nothing about how you authenticate your users — that stays yours.
The specification is a working draft and will change. It is published openly so that implementations can disagree with it in public rather than in private. There is no Paycux implementation of it yet, and no other implementation is known to us.
The draft covers the document format, the flows and worked examples. None of it is available as a Paycux feature today.