{
  "video": {
    "id": "nSkmXakJ6eo",
    "title": "Auth for Agents: Let AI Sign Up for Your Product with auth.md — Michael Grinich, WorkOS",
    "duration": 1273,
    "upload_date": null,
    "channel": "AI Engineer",
    "source": "AI Engineer",
    "event_format": ""
  },
  "analysis": {
    "video_id": "nSkmXakJ6eo",
    "title": "Auth for Agents: Let AI Sign Up for Your Product with auth.md — Michael Grinich, WorkOS",
    "one_liner": "WorkOS's auth.md is an open spec that lets agents sign up for a service on their own. The agent finds the service's auth.md, sends a signed ID-JAG identity assertion and gets an API token back, with no human filling in forms, solving CAPTCHAs or verifying an email.",
    "summary": "Grinich argues that agents now choose vendors and are becoming a new class of consumer, so products should be built for 'something agents want', not just people. Today's signup flows assume a human: landing pages, forms, CAPTCHAs, email verification, copying API keys. MCP doesn't fix this because its auth still needs a human to give consent. auth.md is WorkOS's narrow, open-standards proposal for just the registration step, and he demos an agent signing up for Cloudflare and deploying an app without the human clicking anything.",
    "key_points": [
      "Coding has gone from human-agent back-and-forth to one prompt that can run for hours or days in parallel threads. The bottleneck is now how much context the human can keep in their head.",
      "He lists five things agents need: a runtime/sandbox, tools, context, feedback to check their own work, and human review. Together these are the 'harness' around the LLM 'engine'.",
      "Agents are already choosing vendors (email, deployment, data storage), and that is behind some companies' sudden growth curves. 'It might be more important to build for agents than to build for people.'",
      "He calls agent registration the missing primitive. Login boxes are hardened against automated traffic (DoS prevention, credential stuffing defences), and cloud browser environments sell CAPTCHA-breaking as a feature.",
      "MCP is great for tools, skills and context but doesn't solve registration. Adding an MCP server for PostHog to Claude still means signing in with your PostHog credentials yourself.",
      "An auth.md file answers: what the service does, how to register, which identity proofs and auth flows (SSO, email, MFA) are accepted, scopes and entitlements, free-tier limits, and how a human or organization can claim the account later.",
      "In the demo, a Pi/Claude-style harness finds Cloudflare through its auth.md and mints an ID-JAG (identity JSON access grant, a signed credential representing the user). Cloudflare gives 72 hours of deployment and returns an API token, and the agent then uses Wrangler to deploy. He says it also works with Firecrawl ('fire call' in the transcript).",
      "auth.md is an open spec with a GitHub repo that WorkOS doesn't control. WorkOS hosts a version that is one-click if you use its products, but you can implement it yourself. Payment (e.g. x402) should come after signup, not before."
    ],
    "takeaways": [
      "Build for agents as well as people: 'make something agents want', or risk losing the vendor choices agents are already making.",
      "Publish an auth.md so agents can find your service and register without a human in the loop. Your existing API and docs stay as they are.",
      "Set free-tier limits per application. A database service might give away some traffic, but email services or anything touching the physical world probably shouldn't.",
      "Don't ask for a credit card at signup. Let agents register and use the service first, then pay later on your own pricing.",
      "Let a human or organization claim custody of an agent-created account later."
    ],
    "topics": [
      "agents",
      "authentication",
      "agent registration",
      "harness engineering",
      "mcp",
      "developer experience",
      "identity"
    ],
    "tools": [
      "WorkOS",
      "auth.md",
      "ID-JAG",
      "Cloudflare",
      "Wrangler",
      "Firecrawl",
      "MCP",
      "PostHog",
      "Claude",
      "Pi",
      "OpenClaw",
      "Waymo",
      "X",
      "Y Combinator",
      "Salesforce",
      "Agentforce",
      "Slack",
      "x402",
      "iPhone"
    ],
    "quotes": [
      {
        "text": "going forward, we also need to think about making something that agents want.",
        "at": "06:31",
        "url": "https://www.youtube.com/watch?v=nSkmXakJ6eo&t=391s"
      },
      {
        "text": "I'm sorry to say MCP is not enough.",
        "at": "10:26",
        "url": "https://www.youtube.com/watch?v=nSkmXakJ6eo&t=626s"
      },
      {
        "text": "because markdown files are the future right?",
        "at": "11:16",
        "url": "https://www.youtube.com/watch?v=nSkmXakJ6eo&t=676s"
      },
      {
        "text": "And where there's usage, we believe there's also intent to pay.",
        "at": "18:11",
        "url": "https://www.youtube.com/watch?v=nSkmXakJ6eo&t=1091s"
      }
    ],
    "words": 4710
  },
  "summary_url": "/#nSkmXakJ6eo",
  "transcript": {
    "html": "/transcripts/nSkmXakJ6eo.html",
    "txt": "/transcripts/nSkmXakJ6eo.txt",
    "vtt": "/transcripts/nSkmXakJ6eo.vtt"
  }
}