---
agent_auth:
  register_uri: https://id.veri5.technology/register
  authorization_servers:
    - https://id.veri5.technology
  authorization_endpoint: https://id.veri5.technology/authorize
  token_endpoint: https://id.veri5.technology/token
  revocation_uri: https://id.veri5.technology/revoke
  documentation_uri: https://veri5.technology/auth.md
  identity_types_supported:
    - individual
    - organization
  credential_types_supported:
    - access_token
    - id_token
  scopes_supported:
    - openid
    - profile
    - email
    - wallet
  code_challenge_methods_supported:
    - S256
---

# auth.md — agent authentication & registration

> How AI agents and automated clients authenticate with Veri5 and its apps. Uses OAuth 2.0 /
> OpenID Connect (Authorization Code + PKCE) via the **Veri5 Passport**. Machine-readable
> `agent_auth` metadata is in the YAML frontmatter above.

## Register
- Register: https://id.veri5.technology/register
- Sign in: https://id.veri5.technology/login

Registration issues a managed wallet and a verifiable on-chain identity; organizations can apply
for KYC verification from the account page to become a verified issuer.

## Authenticate
- OIDC discovery: https://id.veri5.technology/.well-known/openid-configuration
- Protected-resource metadata: /.well-known/oauth-protected-resource
- Authorization-server metadata (incl. agent_auth): /.well-known/oauth-authorization-server
- Scopes: openid profile email wallet · PKCE: S256
- Token revocation: https://id.veri5.technology/revoke

## Contact
Operator: Hefes LLC — ryder@hefes.net