# auth.md

Prochinatrader Lighting supports agentic registration.

## Discover

- Protected Resource Metadata: https://prochinatrader.com/.well-known/oauth-protected-resource
- Authorization Server Metadata: https://prochinatrader.com/.well-known/oauth-authorization-server

Read the `agent_auth` block for skill, identity_endpoint, claim_endpoint, identity_types_supported.

## Pick a method

- identity_assertion
- service_auth
- anonymous

## Register

```http
POST /agent/identity HTTP/1.1
Host: prochinatrader.com
Content-Type: application/json

{"type": "anonymous"}
```

```json
{"identity_assertion": "ey...", "assertion_expires": 3600}
```

## Claim ceremony

Use the claim_endpoint from agent_auth with grant_type urn:workos:agent-auth:grant-type:claim

## Exchange the assertion

```http
POST /oauth2/token HTTP/1.1
Host: prochinatrader.com
Content-Type: application/x-www-form-urlencoded

grant_type=urn:ietf:params:oauth:grant-type:jwt-bearer&assertion=ey...
```

## Use the access_token

Authorization: Bearer <access_token>

## Revocation

POST https://prochinatrader.com/oauth2/revoke