Auth for Agents: Let AI Sign Up for Your Product with auth.md — Michael Grinich, WorkOS

Hello everyone, good Hello everyone, good morning. My name is morning. My name is morning. My name is Michael Greenwich. I am the Michael Greenwich. I am the Michael Greenwich. I am the founder of WorkOS. founder of WorkOS. Today I want to Today I want to talk to you about talk to you about talk to you about agents, specifically agents, specifically how to make them more how to make them more how to make them more autonomous and autonomous and autonomous and give them access to give them access to give them access to more more more web services. So, web services. So, web services. So, let's get started. let's get started. let's get started. Greetings to those in the Greetings to those in the Greetings to those in the front row, I front row, I front row, I see you. About a year see you. About a year see you. About a year ago, ago, software engineers wrote software engineers wrote software engineers wrote code like this. We code like this. We code like this. We used AI, but used AI, but used AI, but we gave a request and we gave a request and we gave a request and then wrote then wrote then wrote some code ourselves. Then some code ourselves. Then some code ourselves. Then another request—and the another request—and the another request—and the system wrote some more system wrote some more system wrote some more code. You code. You code. You continued continued continued to do this kind of to do this kind of to do this kind of interactive interactive interactive development with a person in the development with a person in the development with a person in the loop. Later that loop. Later that loop. Later that year, there were year, there were year, there were loops like Ralph, loops like Ralph, loops like Ralph, if anyone remembers, if anyone remembers, if anyone remembers, where we tried to where we tried to where we tried to automate that, but that's automate that, but that's automate that, but that's basically how we worked basically how we worked basically how we worked . It was a . It was a . It was a constant dialogue between constant dialogue between constant dialogue between the human and the agent. the human and the agent. However, as the models improved, they were able to models improved, they were able to write more code and write more code and write more code and work longer. So work longer. So programming programming looks very looks very looks very different today. You write different today. You write different today. You write one query and the agent one query and the agent one query and the agent outputs a lot of code.

outputs a lot of code. Sometimes he can Sometimes he can create an entire create an entire create an entire feature, maybe feature, maybe feature, maybe even an entire product, even an entire product, even an entire product, and work not for and work not for and work not for minutes, but for hours or minutes, but for hours or minutes, but for hours or even days. It even days. It even days. It really changed the really changed the really changed the way we way we way we write code. I write code. I write code. I don't write code by hand anymore, and don't write code by hand anymore, and don't write code by hand anymore, and you probably don't either. And it's you probably don't either. And it's you probably don't either. And it's not just one thread, not just one thread, not just one thread, you can you can you can parallelize it. parallelize it. parallelize it. There are many different There are many different There are many different tools, tools, tools, including major including major coding platforms from coding platforms from leading leading leading labs, that labs, that labs, that allow you to run allow you to run allow you to run many of these many of these many of these processes in parallel. The processes in parallel. The processes in parallel. The limiting limiting limiting factor here, the actual factor here, the actual factor here, the actual "bottleneck", is "bottleneck", is "bottleneck", is your brain. How much your brain. How much your brain. How much context can you context can you context can you hold in your head hold in your head hold in your head to keep to keep to keep all these all these all these processes running simultaneously. processes running simultaneously. processes running simultaneously. This fundamentally changed This fundamentally changed This fundamentally changed software development software development software development . People . People . People became more became more became more productive. productive. productive. I think we all see I think we all see I think we all see how quickly the how quickly the how quickly the industry is developing. industry is developing. At the heart of all this At the heart of all this is agent-based is agent-based is agent-based design. Agents. design. Agents. design. Agents. Moving from token-based language Moving from token-based language Moving from token-based language models models to reasoning and to reasoning and long-running long-running long-running processes that can processes that can processes that can perform tasks perform tasks perform tasks autonomously for autonomously for autonomously for us. I believe that what us. I believe that what us. I believe that what we are seeing in we are seeing in we are seeing in software development thanks to software development thanks to software development thanks to agent-based agent-based agent-based workflows will spread workflows will spread workflows will spread to many other to many other to many other categories. This categories. This categories. This will not will not will not only apply to engineers. This only apply to engineers. This only apply to engineers. This will affect people in will affect people in will affect people in many different many different many different areas. Agents are the areas. Agents are the areas. Agents are the next big next big next big breakthrough. I think a good breakthrough. I think a good breakthrough. I think a good example for this, a example for this, a example for this, a way to think way to think way to think about it, is what about it, is what about it, is what happens with happens with vehicles. So, vehicles. So, you know, it looks you know, it looks you know, it looks like a pretty modern like a pretty modern like a pretty modern car. It has, you car. It has, you car. It has, you know, a digital know, a digital know, a digital display. This is probably something display. This is probably something display. This is probably something you could have you could have you could have bought in the last, well, bought in the last, well, bought in the last, well, 5-10 years. But if you 5-10 years. But if you 5-10 years. But if you live in San live in San Francisco or one of the Francisco or one of the Francisco or one of the cities with these cities with these cities with these autonomous cars, you've autonomous cars, you've autonomous cars, you've probably noticed that probably noticed that probably noticed that we're starting to we're starting to we're starting to remove the interface.

remove the interface. remove the interface. No more No more No more getting in the car, getting in the car, getting in the car, pulling out your phone, and pulling out your phone, and pulling out your phone, and opening maps where opening maps where opening maps where you, as a person, are involved you, as a person, are involved you, as a person, are involved in the process. There may be in the process. There may be in the process. There may be cruise control, but cruise control, but cruise control, but you are still you are still you are still in control of the situation in control of the situation . Instead, these are . Instead, these are . Instead, these are autonomous systems. You autonomous systems. You autonomous systems. You just say where you just say where you just say where you want to go. You want to go. You want to go. You get into the car. You get into the car. You get into the car. You don't even don't even don't even say anything. It just say anything. It just say anything. It just moves and takes you to your moves and takes you to your moves and takes you to your destination. destination. destination. I remember the I remember the I remember the first time I got in a Waymo, I was first time I got in a Waymo, I was first time I got in a Waymo, I was amazed. Just amazed. Just amazed. Just shocked. And 3 shocked. And 3 shocked. And 3 seconds later I took out my seconds later I took out my seconds later I took out my phone and started phone and started phone and started scrolling through X. It became a scrolling through X. It became a scrolling through X. It became a habit. And I think habit. And I think habit. And I think we're already seeing this in we're already seeing this in we're already seeing this in engineering. The power of engineering. The power of engineering. The power of agents allows us to agents allows us to agents allows us to actually work actually work actually work and think at a higher and think at a higher and think at a higher level. So that we, you know, level. So that we, you know, level. So that we, you know, practice more in practice more in practice more in executive functions, executive functions, executive functions, not just not just not just planning and planning and planning and execution. This execution. This execution. This begs the question: what do begs the question: what do begs the question: what do agents need to be agents need to be agents need to be successful? Actually, when successful? Actually, when successful? Actually, when they perform they perform they perform tasks, what do they tasks, what do they tasks, what do they need? Well, need? Well, need? Well, first they need a first they need a first they need a runtime environment runtime environment . Sandbox. They . Sandbox. They . Sandbox. They need a place where need a place where need a place where they can they can they can work. It must work. It must work. It must be safe, be safe, be safe, secure and secure and secure and productive. They productive. They productive. They also need also need also need tools. They tools. They tools. They should be should be should be able to do able to do able to do things in the world. An agent is not things in the world. An agent is not things in the world. An agent is not very useful if very useful if very useful if it cannot act. So it cannot act. So it cannot act. So he needs he needs he needs tools. Third tools. Third , it needs , it needs , it needs context. You know, these context. You know, these context. You know, these new models with new models with new models with powerful intelligence powerful intelligence — it's like taking the — it's like taking the — it's like taking the smartest person smartest person smartest person you know and you know and you know and throwing them into a company, throwing them into a company, throwing them into a company, project, or team where project, or team where project, or team where they know nothing; they know nothing; they know nothing; she won't be able to she won't be able to she won't be able to do anything. They need do anything. They need do anything. They need context, information context, information context, information about the system, about the system, about the system, information about the goals.

information about the goals. information about the goals. They need They need They need feedback. feedback. feedback. That is, a way in which That is, a way in which That is, a way in which they can they can they can work and work and work and check themselves to check themselves to check themselves to make sure that make sure that make sure that the work is correct, and the work is correct, and the work is correct, and if not, to if not, to continue. continue. continue. Last but not Last but not Last but not least: of course, they least: of course, they least: of course, they still need still need still need human supervision. This human supervision. This human supervision. This could be a could be a could be a code review. These could be code review. These could be code review. These could be other forms of control. other forms of control. other forms of control. These could be forms of These could be forms of These could be forms of verification of their verification of their verification of their work to work to work to ensure that these ensure that these ensure that these agents agents agents meet your meet your meet your goals to some extent. LLM, goals to some extent. LLM, goals to some extent. LLM, intelligent intelligent intelligent engine, this new engine, this new engine, this new technology that we technology that we technology that we have created in the last have created in the last have created in the last few years can be few years can be few years can be considered an engine. It's considered an engine. It's considered an engine. It's like a very powerful, like a very powerful, like a very powerful, you know, I think it's a you know, I think it's a you know, I think it's a V8 engine. It puts out V8 engine. It puts out V8 engine. It puts out a lot of horsepower and a lot of horsepower and a lot of horsepower and can convert can convert can convert fuel into output. fuel into output. fuel into output. But the But the But the engine itself is not very engine itself is not very engine itself is not very useful. For useful. For useful. For a car, it a car, it a car, it needs to be installed needs to be installed needs to be installed in the car itself. You in the car itself. You in the car itself. You need a chassis, need a chassis, need a chassis, a transmission, a a transmission, a a transmission, a powertrain, you need powertrain, you need powertrain, you need wheels. And only with wheels. And only with wheels. And only with all this will he be able to all this will he be able to all this will he be able to effectively get effectively get effectively get you where you need to go. And this is what you where you need to go. And this is what you where you need to go. And this is what many many many call a "harness." call a "harness." Harness engineering is a new Harness engineering is a new field where if the field where if the field where if the models get models get models get better, but you better, but you better, but you don't have good don't have good don't have good harness, it's not going to be harness, it's not going to be harness, it's not going to be very effective. So, very effective. So, very effective. So, as models as models as models improve, we improve, we improve, we change our change our change our bindings, adapting bindings, adapting bindings, adapting them to them. And those things them to them. And those things them to them. And those things I mentioned I mentioned I mentioned earlier are a kind of earlier are a kind of earlier are a kind of form of such a form of such a form of such a binding. So binding. So binding. So agents work agents work agents work within these constraints within these constraints within these constraints to complete to complete to complete tasks, and they tasks, and they tasks, and they need all of these need all of these need all of these elements to be elements to be elements to be truly effective.

truly effective. truly effective. And when they go, And when they go, And when they go, they go very, very they go very, very they go very, very fast. Let's say you fast. Let's say you fast. Let's say you have one of these have one of these have one of these agents and you give agents and you give agents and you give him the task of him the task of him the task of creating something for you. He creating something for you. He creating something for you. He thinks for a moment and thinks for a moment and thinks for a moment and says, "Okay, I'm going to says, "Okay, I'm going to says, "Okay, I'm going to need this need this need this feature and this one, I feature and this one, I feature and this one, I need a database, need a database, need a database, I need this I need this deployment system, and deployment system, and maybe a maybe a maybe a tool for tool for tool for resizing images, resizing images, resizing images, transcoding videos, transcoding videos, transcoding videos, sending sending sending emails, emails, emails, or something else." And your or something else." And your or something else." And your agent can agent can agent can do do do all this research and all this research and all this research and build all these build all these build all these systems on their own. And what's happening with agents today is that systems on their own. And what's happening with agents today is that they actually they actually choose choose service providers. You've probably service providers. You've probably seen some seen some seen some of these systems come out, where CEOs of these systems come out, where CEOs of these systems come out, where CEOs tweet about tweet about tweet about their their their growth graph and it skyrockets growth graph and it skyrockets growth graph and it skyrockets because they're because they're because they're being chosen by agents. They being chosen by agents. They being chosen by agents. They choose their choose their choose their systems for systems for systems for sending emails or sending emails or sending emails or deploying code. deploying code. deploying code. Their Their Their data storage systems. data storage systems. data storage systems. Today, in fact, it Today, in fact, it Today, in fact, it may be more important may be more important may be more important to create products to create products to create products for agents than for for agents than for for agents than for people. Agents are a people. Agents are a people. Agents are a new class of new class of new class of consumers. I'll consumers. I'll consumers. I'll talk about that a little talk about that a little talk about that a little later. In San later. In San Francisco, in Francisco, in Francisco, in Silicon Valley, there is a Silicon Valley, there is a Silicon Valley, there is a popular saying: " popular saying: " Create what Create what Create what people want." This is from Y people want." This is from Y people want." This is from Y Combinator, you know, Combinator, you know, Paul Graham's startup factory. And I think it's Paul Graham's startup factory. And I think it's time time time to adjust that a little bit, and to adjust that a little bit, and to adjust that a little bit, and going forward we should going forward we should going forward we should think about think about think about creating what creating what creating what agents want. In agents want. In agents want. In the future, there the future, there the future, there will be more agents than will be more agents than will be more agents than people, perhaps people, perhaps people, perhaps even today.

even today. even today. They will They will They will launch faster, launch faster, complete complete tasks faster, and tasks faster, and tasks faster, and make decisions make decisions make decisions on our behalf. on our behalf. on our behalf. So if you want to So if you want to So if you want to build products build products build products for the next era of for the next era of for the next era of consumers, you should consumers, you should consumers, you should target both target both target both people and people and people and agents. But today agents. But today agents. But today there is a problem. You can there is a problem. You can there is a problem. You can access access access the internet or the internet or the internet or mobile apps, mobile apps, mobile apps, but the agents themselves do not but the agents themselves do not but the agents themselves do not have full have full have full access to the systems. access to the systems. access to the systems. Your business is probably Your business is probably Your business is probably not not not open to open to open to agents today, although there agents today, although there agents today, although there are many of them. They are many of them. They are many of them. They can appear can appear can appear very quickly. The doors very quickly. The doors very quickly. The doors are closed to them. We are closed to them. We are closed to them. We believe this is due to believe this is due to believe this is due to the lack of an underlying the lack of an underlying the lack of an underlying mechanism. Agent mechanism. Agent mechanism. Agent registration, registration, registration, agent registration. agent registration. agent registration. There are many great There are many great There are many great solutions for solutions for solutions for connecting agents, connecting agents, connecting agents, passing context to passing context to passing context to systems, and systems, and systems, and various various open source frameworks. But open source frameworks. But the first step, when the the first step, when the the first step, when the agent actually agent actually agent actually registers with the registers with the registers with the service, is still service, is still service, is still missing. This issue is missing. This issue is missing. This issue is not resolved. And this is a not resolved. And this is a not resolved. And this is a huge obstacle huge obstacle huge obstacle to mass to mass to mass adoption. For adoption. For the last 20, maybe 30 the last 20, maybe 30 years, years, years, automated automated automated traffic on the Internet traffic on the Internet traffic on the Internet has been considered something has been considered something has been considered something harmful. We harmful. We harmful. We tried tried tried to block all of this.

to block all of this. to block all of this. Therefore, we have implemented Therefore, we have implemented Therefore, we have implemented multiple systems to multiple systems to multiple systems to detect detect detect automated automated automated entities and entities and entities and block them immediately block them immediately . Protection against DDoS attacks, . Protection against DDoS attacks, . Protection against DDoS attacks, credential harvesting, credential harvesting, credential harvesting, and other attacks. The and other attacks. The and other attacks. The login form, login form, login form, for example, is now for example, is now for example, is now as protected as possible as protected as possible as protected as possible from agent from agent from agent registration. Not registration. Not registration. Not intentionally, but simply intentionally, but simply intentionally, but simply because of the obsolescence of the because of the obsolescence of the because of the obsolescence of the systems we systems we systems we built. And it is very built. And it is very built. And it is very difficult to distinguish a difficult to distinguish a difficult to distinguish a good good good automated automated automated user from a user from a user from a bad one. If any bad one. If any bad one. If any of you have used of you have used of you have used cloud cloud browser runtimes, browser runtimes, one of their one of their one of their key features is key features is CAPTCHA bypass, which is quite CAPTCHA bypass, which is quite CAPTCHA bypass, which is quite surprising. You know, we're surprising. You know, we're surprising. You know, we're trying to move trying to move trying to move backwards. Although CAPTCHA is backwards. Although CAPTCHA is backwards. Although CAPTCHA is essentially essentially essentially dead today. We see dead today. We see dead today. We see rampant abuse. There are rampant abuse. There are rampant abuse. There are many cases of many cases of token fraud. So we token fraud. So we need to find a need to find a need to find a better way better way better way to let in good to let in good to let in good agents and block agents and block agents and block bad ones, right? Because, bad ones, right? Because, bad ones, right? Because, as I said before, as I said before, as I said before, if you don't build if you don't build if you don't build for the for the for the agent economy, your product agent economy, your product agent economy, your product may not win. may not win. may not win. He may be He may be He may be unsuccessful. unsuccessful. Today's registration processes require require a person to a person to a person to read a landing read a landing read a landing page, fill out page, fill out page, fill out a form, enter their email a form, enter their email a form, enter their email and password, solve a and password, solve a and password, solve a CAPTCHA, and CAPTCHA, and CAPTCHA, and confirm their confirm their confirm their email (not email (not email (not just enter it, but just enter it, but just enter it, but click on a click on a click on a link somewhere).

link somewhere). link somewhere). Remember, the agent Remember, the agent Remember, the agent likely doesn't have an likely doesn't have an likely doesn't have an email address email address email address . If they . If they . If they register with register with register with the service, they need to be the service, they need to be the service, they need to be able to able to able to choose a choose a choose a payment plan. A person can payment plan. A person can payment plan. A person can copy the API key, copy the API key, copy the API key, paste it somewhere, paste it somewhere, paste it somewhere, and use it and use it and use it elsewhere. And elsewhere. And elsewhere. And in general, even in general, even in general, even the dashboard, think the dashboard, think the dashboard, think about the about the about the dashboard interface, it's not dashboard interface, it's not dashboard interface, it's not exactly agent- exactly agent- oriented. All this is oriented. All this is oriented. All this is created for people. created for people. created for people. This is a kind of This is a kind of This is a kind of interface for a person, interface for a person, interface for a person, not for an agent. not for an agent. not for an agent. Agents need Agents need Agents need something different. They something different. They something different. They need native need native need native detection capability detection capability . Can they . Can they . Can they register in the register in the register in the system? Are the system? Are the system? Are the doors open for agents or doors open for agents or doors open for agents or not? Declaring not? Declaring not? Declaring opportunities. What opportunities. What opportunities. What can he do? Purpose can he do? Purpose can he do? Purpose of registration. Why are you of registration. Why are you of registration. Why are you registering? What are you registering? What are you registering? What are you trying to do trying to do trying to do within this? Or within this? Or within this? Or the intention the intention the intention to actually sign. There are to actually sign. There are to actually sign. There are many points here many points here many points here related to related to related to risks. So for risks. So for risks. So for agent-based agent-based agent-based registration, registration, registration, you may not be sure whether the you may not be sure whether the registering agent will be registering agent will be good or bad, good or bad, good or bad, so you need to so you need to so you need to do a do a do a risk assessment. There can be risk assessment. There can be risk assessment. There can be different forms of different forms of identity verification for an identity verification for an agent. If something agent. If something agent. If something like Claude like Claude like Claude registers, registers, registers, it's possible he could it's possible he could it's possible he could use the use the user's identity. Or if user's identity. Or if you have, you know, you have, you know, you have, you know, open source or open source or open source or proprietary development, proprietary development, proprietary development, maybe it doesn't carry a maybe it doesn't carry a user identity and user identity and is verified separately is verified separately . There is still a whole layer of . There is still a whole layer of . There is still a whole layer of issues related to issues related to issues related to organizations. So, organizations. So, organizations. So, if I'm building something if I'm building something if I'm building something within a company, how does within a company, how does my my company identity integrate? Well, my company identity integrate? Well, my company identity integrate? Well, my organization.

organization. organization. Access rights, permissions, Access rights, permissions, Access rights, permissions, credential issuance credential issuance credential issuance , auditing, and the list , auditing, and the list , auditing, and the list goes on. There are so goes on. There are so goes on. There are so many things that many things that many things that need to change. need to change. need to change. In fact, probably In fact, probably In fact, probably most things most things most things need to be changed when need to be changed when need to be changed when moving from moving from moving from human registration to human registration to human registration to agent registration in agent registration in agent registration in agent-oriented agent-oriented agent-oriented systems. Unfortunately, I systems. Unfortunately, I systems. Unfortunately, I have to say that MCP is have to say that MCP is have to say that MCP is not enough. Probably more than not enough. Probably more than not enough. Probably more than anyone else, I'm a anyone else, I'm a anyone else, I'm a big fan of MCP. We big fan of MCP. We big fan of MCP. We held a bunch of events held a bunch of events held a bunch of events in San Francisco in San Francisco in San Francisco dedicated to MCP. I see dedicated to MCP. I see dedicated to MCP. I see someone wearing our someone wearing our someone wearing our “Run MCP” t-shirt that “Run MCP” t-shirt that “Run MCP” t-shirt that we made. I love MCP we made. I love MCP . MCP is great for . MCP is great for . MCP is great for connecting, providing connecting, providing connecting, providing tools, tools, tools, skills, context, skills, context, skills, context, but it doesn't solve the but it doesn't solve the but it doesn't solve the signup stage. signup stage. signup stage. Today, Today, Today, authentication via authentication via authentication via MCP still requires MCP still requires MCP still requires human intervention. You human intervention. You human intervention. You consent. You consent. You consent. You add an MCP server, add an MCP server, add an MCP server, say for PostHog in say for PostHog in say for PostHog in Claude, you log in with Claude, you log in with Claude, you log in with your PostHog credentials. What your PostHog credentials. What we are we are we are talking about here for agent- talking about here for agent- oriented oriented oriented registration should registration should registration should happen without happen without happen without human participation, or human participation, or human participation, or at least without their at least without their at least without their initial participation. We've initial participation. We've initial participation. We've been working on this for been working on this for been working on this for some time, and our some time, and our some time, and our proposal is a new proposal is a new proposal is a new specification that we've specification that we've specification that we've called auth.md. After all, called auth.md. After all, called auth.md. After all, markdown files are the markdown files are the markdown files are the future, right?

future, right? So, how does it actually So, how does it actually work? What is auth.md? work? What is auth.md? work? What is auth.md? The idea is The idea is The idea is that auth.md tells that auth.md tells that auth.md tells agents how they agents how they agents how they can become can become can become legitimate legitimate legitimate users. This is a users. This is a users. This is a set of instructions for an set of instructions for an set of instructions for an agent agent agent registering with registering with registering with the service: what needs to be the service: what needs to be the service: what needs to be done to done to done to register, register, register, be considered authentic, be considered authentic, be considered authentic, and gain access. and gain access. Our goal is to provide Our goal is to provide service developers with an service developers with an agent registration option agent registration option that is based on that is based on that is based on existing standards. existing standards. Instead of Instead of inventing something new inventing something new inventing something new and overly complicated. and overly complicated. and overly complicated. With auth.md, we don't With auth.md, we don't With auth.md, we don't solve the entire solve the entire solve the entire problem of problem of agent identification, permissions, or agent identification, permissions, or long-lasting connections. We long-lasting connections. We long-lasting connections. We are trying to solve are trying to solve are trying to solve only the narrow issue of only the narrow issue of only the narrow issue of registration, as I registration, as I registration, as I consider this to be the main consider this to be the main consider this to be the main obstacle. Let's start obstacle. Let's start obstacle. Let's start small and small and small and develop further. It is develop further. It is develop further. It is built on built on built on open standards open standards . This builds on . This builds on . This builds on work already work already work already done in the done in the done in the OAuth specification, OAuth specification, OAuth specification, adapted adapted adapted specifically for specifically for specifically for registration. Auth.md can registration. Auth.md can registration. Auth.md can answer what answer what answer what this service does. Tells this service does. Tells this service does. Tells agents how agents how agents how to register.

to register. to register. Explains what proof of Explains what proof of Explains what proof of identity identity identity is accepted. How does an agent is accepted. How does an agent is accepted. How does an agent or user or user or user verify their verify their verify their identity? What authorization flows identity? What authorization flows are supported? are supported? Can I Can I Can I register register register via SSO, email or MFA? via SSO, email or MFA? via SSO, email or MFA? What areas of access What areas of access What areas of access and rights may and rights may and rights may exist? What exist? What exist? What opportunities are opportunities are opportunities are available here? What available here? What free tier limitations free tier limitations apply? apply? apply? You may want to You may want to You may want to give the agent some give the agent some give the agent some free free free resources, but not resources, but not resources, but not too much until too much until too much until they verify their they verify their they verify their identity or identity or identity or pay. And, of course, pay. And, of course, pay. And, of course, how do you attract how do you attract how do you attract people later? When a person people later? When a person people later? When a person or organization or organization or organization claims it claims it claims it later. An agent can later. An agent can later. An agent can sign up, but sign up, but sign up, but you want the person to have you want the person to have you want the person to have control later. This is exactly what control later. This is exactly what auth.md was created for. These are the auth.md was created for. These are the main questions main questions main questions regarding regarding regarding registration. So how does registration. So how does registration. So how does this work in practice this work in practice ? Here's a little ? Here's a little demo that I'll demo that I'll demo that I'll show you. And, by the way, all of show you. And, by the way, all of show you. And, by the way, all of this already works. You this already works. You this already works. You can try this can try this can try this after the presentation. after the presentation. after the presentation. Let's say I'm Let's say I'm Let's say I'm in a in a in a development environment, development environment, development environment, like Pi or Cloud. like Pi or Cloud. like Pi or Cloud. It says, “Welcome It says, “Welcome It says, “Welcome again, Michael. I again, Michael. I again, Michael. I work in OS. This is work in OS. This is work in OS. This is my email, by the way, if my email, by the way, if my email, by the way, if you want to write. " you want to write. " Do you want to continue Do you want to continue Do you want to continue working on your working on your working on your application?" I application?" I application?" I answer, "Yes, answer, "Yes, answer, "Yes, of course." I would like to of course." I would like to of course." I would like to share this with my share this with my share this with my friends. But they don't friends. But they don't friends. But they don't have have have access to it. And the agent says, access to it. And the agent says, access to it. And the agent says, "Well, localhost only works "Well, localhost only works "Well, localhost only works on your computer, on your computer, on your computer, so of course your friends won't so of course your friends won't so of course your friends won't be able to be able to be able to open it." To open it." To open it." To share, I share, I share, I need to unfold need to unfold need to unfold it somewhere it somewhere real. Some real. Some real. Some providers actually providers actually providers actually let me let me let me handle handle handle the registration. So, the registration. So, the registration. So, you know, you wouldn't have to you know, you wouldn't have to register and register and do it yourself. Do do it yourself. Do do it yourself. Do you want me to search for you want me to search for you want me to search for you? Yes, please.

you? Yes, please. And then the agent can And then the agent can go look for services go look for services go look for services that claim through AuthMD that claim through AuthMD that claim through AuthMD that they that they that they support support support registration. Here are registration. Here are registration. Here are some examples: some examples: some examples: Stratus, Heroku Deploy—they Stratus, Heroku Deploy—they Stratus, Heroku Deploy—they don't support this. don't support this. don't support this. But CloudFlare has AuthMD. And But CloudFlare has AuthMD. And But CloudFlare has AuthMD. And so the agent can so the agent can so the agent can say, "Oh, CloudFlare, that's what I say, "Oh, CloudFlare, that's what I say, "Oh, CloudFlare, that's what I need. CloudFlare is need. CloudFlare is the best option because the best option because the best option because I can register there myself I can register there myself I can register there myself . I . I . I can access the can access the can access the service. I can service. I can service. I can actually actually actually use it." So, use it." So, use it." So, I can totally do that I can totally do that I can totally do that . Want to . Want to . Want to try? Yes, try? Yes, try? Yes, let's do this. This is the let's do this. This is the let's do this. This is the registration stage. It's a kind of registration stage. It's a kind of registration stage. It's a kind of magic. My magic. My magic. My agent actually agent actually agent actually creates the creates the creates the identity verification identity verification identity verification and passes it to CloudFlare. and passes it to CloudFlare. and passes it to CloudFlare. And then CloudFlare can And then CloudFlare can And then CloudFlare can verify it. Or not. verify it. Or not. verify it. Or not. CloudFlare may choose CloudFlare may choose CloudFlare may choose to verify in a different to verify in a different to verify in a different way. AuthMD is very way. AuthMD is very way. AuthMD is very flexible. There are different flexible. There are different flexible. There are different ways to configure it ways to configure it ways to configure it depending on what depending on what depending on what behavior you behavior you behavior you need. There need. There is no universal solution. is no universal solution. Each application is Each application is Each application is unique. unique. unique. The restrictions are completely The restrictions are completely The restrictions are completely different. If you different. If you different. If you are building something are building something are building something like a database service like a database service like a database service where there will be very where there will be very where there will be very little information, you little information, you little information, you may want to may want to may want to provide some traffic provide some traffic provide some traffic for free. But if for free. But if for free. But if you're building something you're building something you're building something like a postal like a postal like a postal service, or something that service, or something that service, or something that interacts with the real interacts with the real interacts with the real world, you might world, you might world, you might not want to not want to not want to give anything away for free.

give anything away for free. give anything away for free. It depends a lot on the It depends a lot on the It depends a lot on the program. So here program. So here program. So here CloudFlare says, "Okay, we're CloudFlare says, "Okay, we're CloudFlare says, "Okay, we're ready to allow you to ready to allow you to ready to allow you to deploy, maybe deploy, maybe deploy, maybe for 72 hours or for 72 hours or for 72 hours or something. Get something. Get something. Get identity verification, identity verification, identity verification, and you're done." It's and you're done." It's and you're done." It's called ID Jag, called ID Jag, called ID Jag, that's the standard. And that's the standard. And that's the standard. And then he then he then he comes back and says, " comes back and says, " You now have a You now have a CloudFlare account." In this CloudFlare account." In this process, as a human, I didn't process, as a human, I didn't press anything anywhere. I didn't press anything anywhere. I didn't register anywhere. He register anywhere. He register anywhere. He just got a token. just got a token. just got a token. I can make a few I can make a few I can make a few small adjustments. small adjustments. small adjustments. He knows how to He knows how to He knows how to use Wrangler use Wrangler . Do you want me to make these . Do you want me to make these . Do you want me to make these changes? Come on, do it. Does changes? Come on, do it. Does changes? Come on, do it. Does anyone else make these kinds of anyone else make these kinds of anyone else make these kinds of requests to their agents? requests to their agents? requests to their agents? It's just like, yes, It's just like, yes, It's just like, yes, yes, do it, yes, do it, yes, do it, please. He says little. please. He says little. please. He says little. He can write He can write He can write Wrangler, configure everything Wrangler, configure everything , go through the full , go through the full , go through the full deployment process, and— deployment process, and— boom—it works. boom—it works. boom—it works. We even have it working We even have it working We even have it working as a live demonstration. as a live demonstration. as a live demonstration. We also We also We also collaborated with collaborated with collaborated with Cloudflare on this issue Cloudflare on this issue . That's pretty cool. And you . That's pretty cool. And you . That's pretty cool. And you see that the queries see that the queries see that the queries I provided are not I provided are not I provided are not some higher some higher some higher mathematics. mathematics. mathematics. In fact, the agent could In fact, the agent could In fact, the agent could just do just do just do everything themselves. I everything themselves. I everything themselves. I didn't do anything special didn't do anything special didn't do anything special in the queries in the queries in the queries except just except just except just confirm, confirm, confirm, confirm, and confirm, and confirm, and confirm. He confirm. He confirm. He should be able to should be able to should be able to do it in one do it in one do it in one go. Here's what it go. Here's what it go. Here's what it looks like graphically.

looks like graphically. looks like graphically. So, So, So, agent registration via Auth MD: agent registration via Auth MD: agent registration via Auth MD: you have an you have an you have an agent environment, like a Pi, agent environment, like a Pi, agent environment, like a Pi, inside—your LLM, inside—your LLM, inside—your LLM, maybe memory, maybe memory, maybe memory, different levels of different levels of different levels of context. It context. It context. It connects to connects to connects to your your your identity service. So, identity service. So, identity service. So, this is the this is the this is the user identity. And when user identity. And when user identity. And when this agent this agent this agent registers, it registers, it registers, it sends a sends a sends a discovery request to Cloudflare. discovery request to Cloudflare. discovery request to Cloudflare. It is looking for this Auth MD or It is looking for this Auth MD or It is looking for this Auth MD or another service. We another service. We another service. We also have this working with Fire call. also have this working with Fire call. also have this working with Fire call. That's pretty cool. He That's pretty cool. He That's pretty cool. He sends this ID to jag. sends this ID to jag. sends this ID to jag. Identity JSON access grant Identity JSON access grant . . . Essentially, a signed Essentially, a signed Essentially, a signed account account account represents represents represents a user. He says: this is a user. He says: this is a user. He says: this is identity. identity. identity. Gets back an Gets back an Gets back an access token, a real API access token, a real API token, and—boom—it's token, and—boom—it's token, and—boom—it's done. You can done. You can done. You can make regular API make regular API requests. You can requests. You can requests. You can call MCP. Everything else call MCP. Everything else call MCP. Everything else continues to work. continues to work. continues to work. As you can see, Auth MD is As you can see, Auth MD is As you can see, Auth MD is only needed for the only needed for the only needed for the registration stage. Your registration stage. Your registration stage. Your regular API regular API regular API continues to work. continues to work. continues to work. The rest of the documentation The rest of the documentation The rest of the documentation should not should not should not change. This change. This change. This registration step is for registration step is for registration step is for agents only. But behind this agents only. But behind this agents only. But behind this simplicity simplicity simplicity lies enormous lies enormous lies enormous power. Because it power. Because it power. Because it allows agents allows agents allows agents to complete tasks to complete tasks to complete tasks from start to finish.

from start to finish. from start to finish. I hate the I hate the I hate the planning stage. When I planning stage. When I planning stage. When I write something, I just write something, I just write something, I just want an agent to go want an agent to go want an agent to go and do it. and do it. and do it. He usually understands what I He usually understands what I He usually understands what I want, and I want to want, and I want to want, and I want to get a working get a working get a working prototype, not "here's prototype, not "here's prototype, not "here's my long plan" and " my long plan" and " here's a bunch of services I here's a bunch of services I here's a bunch of services I need to need to need to subscribe to." subscribe to." subscribe to." Especially if I'm Especially if I'm Especially if I'm building new building new building new prototypes, I'd prototypes, I'd prototypes, I'd prefer prefer prefer them to be freely them to be freely them to be freely deployable so I deployable so I deployable so I can see them, can see them, can see them, click on them, and not have to click on them, and not have to click on them, and not have to bother bother bother signing up with all signing up with all signing up with all these different these different these different providers. And this is what providers. And this is what providers. And this is what AuthMD allows. And AuthMD allows. And AuthMD allows. And if you're a if you're a if you're a service provider, if you're service provider, if you're service provider, if you're building APIs or building APIs or building APIs or services, it allows services, it allows services, it allows you to become a customer of you to become a customer of you to become a customer of these systems, and you these systems, and you these systems, and you can view it can view it can view it as increasing your as increasing your as increasing your growth funnel. growth funnel. growth funnel. Starting, you know, Starting, you know, Starting, you know, maybe just with maybe just with maybe just with people, adding a whole people, adding a whole people, adding a whole world of agents on top. world of agents on top. world of agents on top. Pretty great. We Pretty great. We Pretty great. We think it will be think it will be think it will be grand. Your grand. Your grand. Your doors will be doors will be doors will be open to agents open to agents open to agents so they can so they can so they can register and register and register and use your use your use your services. This should services. This should services. This should be an instant be an instant be an instant boost to boost to boost to your your your product growth. And I'm not saying product growth. And I'm not saying that everything that everything agents create will be useful . Maybe not everything . Maybe not everything . Maybe not everything they create will go into they create will go into they create will go into production or production or production or last long, but last long, but last long, but some will stick.

some will stick. some will stick. As with PLG or freemium As with PLG or freemium models before, this is a models before, this is a models before, this is a way to grow your way to grow your way to grow your business, attract business, attract business, attract more customers, and more customers, and more customers, and become bigger and more become bigger and more become bigger and more successful. And where there successful. And where there successful. And where there is use, we is use, we is use, we believe, there is also an intention to believe, there is also an intention to believe, there is also an intention to pay. There's pay. There's pay. There's a lot of interesting a lot of interesting a lot of interesting work being done to make it work being done to make it work being done to make it possible for agents to actually possible for agents to actually possible for agents to actually pay for things. pay for things. pay for things. There are crypto There are crypto protocols such as X402. protocols such as X402. protocols such as X402. There are other things that There are other things that There are other things that payment payment payment providers create. But we providers create. But we providers create. But we believe that this should believe that this should believe that this should be in the next be in the next be in the next stages. We don't want stages. We don't want stages. We don't want payments to be payments to be payments to be mandatory at the mandatory at the mandatory at the start. We don't want to start. We don't want to start. We don't want to force your force your force your agent to sign up agent to sign up agent to sign up with a credit card. with a credit card. with a credit card. This seems like a step This seems like a step This seems like a step backwards. We have moved away backwards. We have moved away backwards. We have moved away from this in the SaaS world. from this in the SaaS world. With AuthMD, agents can With AuthMD, agents can sign up, sign up, sign up, start start start using, and using, and using, and then pay later then pay later then pay later on your terms, at on your terms, at on your terms, at your prices, and your prices, and your prices, and model. If you don't model. If you don't model. If you don't believe me or the " believe me or the " headless" products, headless" products, headless" products, here's Marc Benioff. He's the here's Marc Benioff. He's the here's Marc Benioff. He's the CEO CEO CEO and founder of Salesforce, and founder of Salesforce, and founder of Salesforce, the guys from that the guys from that the guys from that big building in the big building in the big building in the city. They believe in city. They believe in city. They believe in agents above all else. agents above all else. agents above all else. Our API is the Our API is the Our API is the interface. All interface. All interface. All Salesforce, Agent Salesforce, Agent Salesforce, Agent Force, and Slack platforms are now Force, and Slack platforms are now Force, and Slack platforms are now available as APIs, MCPs, available as APIs, MCPs, available as APIs, MCPs, and CLIs. This is what it means and CLIs. This is what it means and CLIs. This is what it means to be to be to be agent-centric. The company, agent-centric. The company, agent-centric. The company, considered by many to be an considered by many to be an considered by many to be an outdated SaaS outdated SaaS vendor that vendor that vendor that essentially invented the essentially invented the software-as-a- software-as-a- service category, is service category, is service category, is getting rid of its getting rid of its getting rid of its control panels and control panels and control panels and interface. I interface. I interface. I mean, they're not mean, they're not mean, they're not getting rid of them, but getting rid of them, but getting rid of them, but they believe that they believe that they believe that agents are the future.

agents are the future. agents are the future. So, if you're not thinking about it yet So, if you're not thinking about it yet So, if you're not thinking about it yet , I , I , I strongly advise strongly advise strongly advise you to start you to start you to start prototyping prototyping prototyping and communicating with and communicating with and communicating with users, because you users, because you users, because you don't want to don't want to don't want to miss out. If you miss out. If you miss out. If you want to want to want to use it, it's use it, it's use it, it's available available available today. We have an today. We have an today. We have an open open open specification for specification for specification for this. There is a repository this. There is a repository this. There is a repository on GitHub. You can on GitHub. You can on GitHub. You can instruct your instruct your instruct your agent to implement agent to implement agent to implement this. I know, that's a bit of a this. I know, that's a bit of a this. I know, that's a bit of a goal. This is an open goal. This is an open goal. This is an open specification. WorkOS does not specification. WorkOS does not specification. WorkOS does not control it. We have a control it. We have a control it. We have a version that we version that we version that we host, but you host, but you host, but you can build it can build it can build it yourself. You can yourself. You can yourself. You can run it run it run it yourself on your yourself on your yourself on your existing systems. I existing systems. I existing systems. I think this is so think this is so think this is so important that no important that no important that no vendor should vendor should vendor should own it own it own it alone. This works alone. This works alone. This works in one click for in one click for in one click for user needs, user needs, user needs, but you can but you can but you can build anything on build anything on whichever platform you want. Finally, I will say that Finally, I will say that this happened almost 20 this happened almost 20 this happened almost 20 years ago. It seems to be years ago. It seems to be years ago. It seems to be right here at Moscone, which is right here at Moscone, which is right here at Moscone, which is pretty cool. In January pretty cool. In January pretty cool. In January 2007, it seems, 2007, it seems, 2007, it seems, Steve Jobs Steve Jobs Steve Jobs introduced the iPhone. I introduced the iPhone. I introduced the iPhone. I was a student then, was a student then, was a student then, I remember, it was my I remember, it was my I remember, it was my first year of college. first year of college. first year of college. I remember it very, I remember it very, I remember it very, very clearly. This was the very clearly. This was the very clearly. This was the next big next big next big software platform they software platform they software platform they created. So created. So created. So many companies many companies many companies emerged simply because emerged simply because emerged simply because they could they could they could build on these build on these build on these devices—it was the devices—it was the devices—it was the smartphone revolution smartphone revolution . And since then, as far as I can tell . And since then, as far as I can tell , there hasn't been a , there hasn't been a , there hasn't been a moment like it in the age of moment like it in the age of moment like it in the age of technology, technology, technology, at least for me.

at least for me. at least for me. What we were doing What we were doing What we were doing around B2B SaaS and around B2B SaaS and around B2B SaaS and cloud services—that's cloud services—that's cloud services—that's great, but it was a great, but it was a great, but it was a whole new whole new whole new paradigm, a new paradigm, a new paradigm, a new software platform. software platform. And I think that agents are what it is . Agents . Agents are the next big are the next big are the next big wave. So I want to wave. So I want to wave. So I want to say to all of you: say to all of you: say to all of you: go and create. go and create. go and create. With Authsignal, we With Authsignal, we With Authsignal, we hope to hope to hope to unlock this for you, unlock this for you, unlock this for you, for your business, and for for your business, and for for your business, and for your growth. But your growth. But your growth. But we want to hear from you, we want to hear from you, we want to hear from you, to find out where exactly you are to find out where exactly you are to find out where exactly you are facing facing facing difficulties. And I believe difficulties. And I believe difficulties. And I believe that together we can that together we can that together we can build this build this build this next exciting next exciting next exciting era of era of era of software and software and software and realize the realize the realize the agent revolution. agent revolution. agent revolution. Thank you very much. Thank you very much.