# Auth.md

This site publishes agent authentication and registration metadata for AI agents.

## Service

Name: Cloudlayer AI
URL: https://www.cloudlayer.ai

## Agent Registration

Registration URI:
https://www.cloudlayer.ai/agent/auth

Claim URI:
https://www.cloudlayer.ai/agent/auth/claim

Revocation URI:
https://www.cloudlayer.ai/agent/auth/revoke

## OAuth Metadata

Authorization Server Metadata:
https://www.cloudlayer.ai/.well-known/oauth-authorization-server

Protected Resource Metadata:
https://www.cloudlayer.ai/.well-known/oauth-protected-resource

JWKS:
https://www.cloudlayer.ai/.well-known/jwks.json

## Supported Identity Types

- anonymous
- identity_assertion

## Supported Credential Types

- api_key
- access_token

## Supported Scopes

- public.read
- products.read

## Bearer Method

Send tokens using the Authorization header:

Authorization: Bearer <token>

## Registration Flow

1. Read this Auth.md document.
2. Fetch OAuth Protected Resource Metadata.
3. Fetch OAuth Authorization Server Metadata.
4. Register the agent using the Registration URI.
5. Use the Claim URI for identity assertions when required.
6. Use the Revocation URI for revocation events.
7. Request authorization using the authorization endpoint.
8. Exchange credentials using the token endpoint.
9. Call protected resources using bearer tokens in the Authorization header.