# auth.md

You are an agent. This service supports **agentic registration**: discover → register → (claim if needed) → exchange for an access_token → call API → handle revocation.

> Autonomous Agent Authentication, Verification & Registration Protocol for SmarteeDigital (https://smarteedigital.com)

## 1. Overview & Agent Identity
SmarteeDigital enables automated AI agents and programmatic systems to discover, inspect, and invoke capabilities across our venture ecosystem and enterprise services.

- **Protected Resource Metadata**: [https://smarteedigital.com/.well-known/oauth-protected-resource](https://smarteedigital.com/.well-known/oauth-protected-resource)
- **OAuth Authorization Server**: [https://smarteedigital.com/.well-known/oauth-authorization-server](https://smarteedigital.com/.well-known/oauth-authorization-server)
- **ARD 1.0 Manifest**: [https://smarteedigital.com/.well-known/ai-catalog.json](https://smarteedigital.com/.well-known/ai-catalog.json)

---

## 2. Agent Registration Workflow

### Supported Identity Types
- `identity_assertion`: Verified ID-JAG or verified email assertion tokens.
- `anonymous`: Ephemeral trial registration for unauthenticated agents with organization-scoped rate limits.
- `service_auth`: Service account registration with email claim ceremony.

### Registration Request
```http
POST https://smarteedigital.com/api/auth/register-agent HTTP/1.1
Host: smarteedigital.com
Content-Type: application/json

{
  "client_name": "AutonomousEnterpriseAgent",
  "client_uri": "https://agent.example.com",
  "identity_type": "autonomous_agent",
  "grant_types": ["client_credentials"],
  "response_types": ["token"],
  "scope": "services:read ventures:read adrs:read"
}
```

---

## 3. Supported Scopes
- `ventures:read`: Query architecture and live metrics of proprietary SaaS ventures.
- `services:read`: Query deliverables, process steps, and tech stacks for all 6 engineering verticals.
- `adrs:read`: Query and inspect public Architectural Decision Records.
- `inquiry:submit`: Submit programmatic project scopes and consultation requests.

---

## 4. Security Contact & Revocation
- **Revocation Endpoint**: `https://smarteedigital.com/api/auth/revoke`
- **Claim Endpoint**: `https://smarteedigital.com/auth/claim-agent`
- **Security Disclosure**: `security@smarteedigital.com`