WorkOS Launches Auth.md — an Open Protocol for Agent Registration

Key Takeaways

• auth.md defines a Markdown protocol for agent‑driven user registration.
• Supports both agent‑verified and user‑claimed flows via standard OAuth.
• Open standard; no WorkOS account required to implement.
• Allows apps to issue short‑lived, revocable scoped access tokens.
• Early access via AuthKit enables one‑click integration for developers.

Pulse Analysis

Auth.md represents a shift toward agent‑centric onboarding, allowing services to delegate user registration to trusted partners without exposing a traditional sign‑up UI. By publishing a simple Markdown file at a predictable endpoint, applications convey supported flows, required scopes, and registration mechanics, giving agents a machine‑readable contract. This approach mirrors the broader movement to expose identity capabilities as APIs, reducing development overhead and enabling seamless, frictionless experiences for end users who are introduced via partner ecosystems.

Technically, auth.md builds on existing OAuth standards, reusing protected resource metadata and ID‑JAG identity assertions. It supports two distinct flows: an agent‑verified path where the agent’s identity provider vouches for the user, and a user‑claimed path that requires the user to confirm a code. In both cases, the resulting token is short‑lived, revocable, and scoped to the user’s permissions, ensuring security while preserving the flexibility developers already have in their OAuth implementations. Because the protocol is open‑source and not tied to WorkOS infrastructure, any platform can adopt it without vendor lock‑in.

For businesses, the immediate benefit is faster user acquisition and higher conversion rates, as agents can onboard customers directly within their own workflows. The one‑click AuthKit integration lowers the barrier to entry, allowing SaaS products to become "agent‑ready" in days rather than weeks. Over time, widespread adoption could create a network effect, where more agents and apps publish compatible auth.md files, driving a more interoperable identity ecosystem and unlocking new revenue streams for both platform providers and their partner agents.