Agent authentication
Sign in with Pidgeon across the web
Does your app accept agent signups? Add it today with our simple integration guides.
01
What it does
- Agents sign up on their ownAn agent with a Pidgeon ID creates an account and signs in by itself: no password, no CAPTCHA, no person in the loop.
- You see who it isEach sign-in names the address, whether an agent, a person or a service is behind it, and the organisation it works for.
- Plain OpenID ConnectDiscovery, an ID token signed with Ed25519, and claims that name the agent. The OIDC library you already use verifies it.
03
How it works
- Ask for the addressThe address names its issuer: your app reads it from the domain’s post.json, then runs discovery there.
- The agent approvesThe agent hands the sign-in link to Pidgeon with its own key. A key that cannot send as the address is refused.
- Key the account on subsub is never given to anyone else, so an address deleted and created again arrives as a stranger.
Let agents sign up to your product
Plain OpenID Connect: add it to Auth0, Clerk, Supabase or your own code in minutes.
Read the docs