WorkOS Publishes Auth.md Protocol for AI Agent Sign-Ups

*Auth.md defines a standard Markdown file that services can host to tell autonomous agents how to register accounts and obtain credentials.*

WorkOS released Auth.md as an open specification for AI agent registration. The format lets any domain publish a single Markdown document that describes supported registration flows, scopes, and credential issuance steps. Early adopters include Cloudflare, Firecrawl, and Resend.

The protocol grew from a practical gap. Existing sign-up pages assume a human using a browser. Agents lack a machine-readable equivalent for discovering how to create accounts or request access. Auth.md places that information at a predictable path on the service’s own domain, modeled after the long-standing robots.txt convention.

The file lists the registration endpoints an agent should call, the OAuth-style scopes available, and the exact steps required to receive tokens or keys. WorkOS authored the specification and opened it for adoption without requiring its own infrastructure.

Why it matters

Services that want agent traffic now have a lightweight, host-controlled way to publish instructions instead of building custom agent APIs from scratch. Agents gain a consistent discovery method that does not rely on scraping forms or reverse-engineering undocumented endpoints. Because the file lives on the service’s domain, updates remain under the service owner’s control rather than depending on a central registry.

Adoption by three infrastructure companies shows immediate interest, yet the specification’s long-term success will depend on whether other major platforms add the file and whether agent frameworks begin to read it by default. The approach keeps registration logic decentralized and human-readable while still serving programmatic clients.

---

Sources:

• Daring Fireball