Step 3 — Auth.md + OAuth discovery

Advanced Agentic Commerce: Ship the Full Agent Surface — lesson 5 of 20 (PLAYBOOK)

Publish /auth.md in Markdown explaining how an agent registers, plus /.well-known/oauth-protected-resource and /.well-known/oauth-authorization-server. Include an agent_auth block and serve the RFC 8414 issuer-suffix path too — scanners fetch /.well-known/oauth-authorization-server/auth/v1 and a 404 there fails the check.

Source: IETF RFC 8414

Previous lesson · Next lesson · Course overview · All courses