# Agent Registration with auth.md

Open protocol for autonomous agents to self-register for services without human intervention — a standardized auth.md file + HTTP endpoints replace OAuth and sign-up forms.

**Type:** article
**Added:** 2026-05-28
**Source date:** 2026-05-21
**Author:** [Garrett Galow](https://workos.com)
**Link:** https://workos.com/blog/agent-registration-with-auth-md
**Topics:** AI, Backend
**Tags:** agents, security, auth

---

Proposes `auth.md` as a discovery document (published at `https://yourservice.com/auth.md`) paired with three HTTP endpoints (`/agent-auth`, `/agent-auth/claim`, `/agent-auth/claim/complete`) to let agents register without a human in the loop.

Two flows:

- **Agent Verified** — trusted agent platforms sign ID-JAG assertions; services verify against provider JWKS and issue credentials synchronously
- **User Claimed** — six-digit OTP sent to a user; anonymous pre-claim access allowed with limited permissions until claimed

Built on RFC 9728 (resource discovery), the IETF ID-JAG delegation draft, and OIDC backchannel logout for revocation. JWT validation reuses existing OIDC patterns (`jose` library in the Node.js example). Five implementation steps to add to an existing auth system.

---

## Links

- Directory entry: https://andrey-markin.com/directory/agent-registration-auth-md
- All directory entries: https://andrey-markin.com/directory
- Contact: https://andrey-markin.com/#contact