When an AI agent tries to complete a task that requires a new account, it hits a wall: the sign-up form. There’s no standard for how an agent registers a user with an app on their behalf.
auth.md is a file you host at your domain that tells agents how to register your users, which flows you support, what scopes you expose, and how credentials get issued. Think robots.txt, but for agent registration. It composes existing OAuth standards.
Cloudflare, Firecrawl, and Resend have already adopted it.
An open protocol authored by WorkOS. Read the spec.
source & further reading
workos.com — original article