# Converter API Agent Auth

Converter API accepts agent registration through WorkOS auth.md.

## Discovery

1. Read Protected Resource Metadata at https://api-staging.converting.app/.well-known/oauth-protected-resource.
2. Read Authorization Server Metadata at https://api-staging.converting.app/.well-known/oauth-authorization-server.
3. Register at /agent/identity with type anonymous, identity_assertion, or service_auth.
4. Exchange the returned identity_assertion at /oauth2/token.

## Scopes

- formats.read: read supported conversion formats.
- jobs.write: create and start conversion jobs.
- jobs.read: read conversion job status and artifacts.
- usage.read: read usage totals after claim.
- webhooks.write: manage webhook endpoints after claim.

## Current Phase

Phase 0 publishes discovery documents and keeps this file machine-readable.