Open protocol for autonomous agents to self-register for services without human intervention — a standardized auth.md file + HTTP endpoints replace OAuth and sign-up forms.
Proposes auth.md as a discovery document (published at https://yourservice.com/auth.md) paired with three HTTP endpoints (/agent-auth, /agent-auth/claim, /agent-auth/claim/complete) to let agents register without a human in the loop.
Two flows:
Built on RFC 9728 (resource discovery), the IETF ID-JAG delegation draft, and OIDC backchannel logout for revocation. JWT validation reuses existing OIDC patterns (jose library in the Node.js example). Five implementation steps to add to an existing auth system.