# auth.md - Noxport Labs Autonomous Agent Authentication & Discovery

Noxport Labs provides machine-to-machine agent interfaces for storefront exploration, MCP tool execution, and local-first cryptographic software licensing.

## OAuth Protected Resource Metadata (PRM)
- Metadata URL: [https://noxportlabs.com/.well-known/oauth-protected-resource](https://noxportlabs.com/.well-known/oauth-protected-resource)
- Resource Identifier: `https://noxportlabs.com`
- Authorization Servers: `["https://noxportlabs.com"]`
- Scopes Supported: `["public:read", "license:activate", "order:create", "order:read", "agent:chat"]`
- Bearer Methods Supported: `["header"]`
- Resource Documentation: [https://noxportlabs.com/docs](https://noxportlabs.com/docs)

## OAuth Authorization Server Metadata
- Authorization Server URL: [https://noxportlabs.com/.well-known/oauth-authorization-server](https://noxportlabs.com/.well-known/oauth-authorization-server)
- OpenID Configuration: [https://noxportlabs.com/.well-known/openid-configuration](https://noxportlabs.com/.well-known/openid-configuration)
- Issuer: `https://noxportlabs.com`
- Token Endpoint: `https://noxportlabs.com/api/auth/token`
- JWKS URI: `https://noxportlabs.com/.well-known/jwks.json`
- Grant Types: `["client_credentials", "authorization_code", "urn:ietf:params:oauth:grant-type:token-exchange"]`
- Response Types: `["code", "token"]`

## Agent Registration & Auth (`agent_auth`)
```json
{
  "skill": "https://noxportlabs.com/.well-known/agent-skills/noxport-catalog/SKILL.md",
  "register_uri": "https://noxportlabs.com/api/agent/register",
  "supported_methods": [
    {
      "method": "anonymous",
      "identity_types_supported": ["anonymous"],
      "anonymous": {
        "credential_types_supported": ["bearer_token"],
        "claim_uri": "https://noxportlabs.com/api/auth/token"
      }
    },
    {
      "method": "verified_email",
      "identity_assertion": {
        "assertion_types_supported": ["verified_email"],
        "claim_uri": "https://noxportlabs.com/api/auth/token"
      }
    },
    {
      "method": "id-jag",
      "identity_types_supported": ["identity_assertion"],
      "identity_assertion": {
        "assertion_types_supported": ["urn:ietf:params:oauth:token-type:id-jag"]
      }
    }
  ]
}
```

## Cryptographic Licensing Protocol (`NOX1`)
- Algorithm: Ed25519 (`EdDSA`)
- Key ID (`kid`): `nxp-ed25519-2026-v4`
- Signatures Directory: `https://noxportlabs.com/.well-known/http-message-signatures-directory`
- Verification: 100% offline via WebCrypto API with zero network calls, zero tracking, and zero account dependencies.