Skip to main content

Welcome to AgentDoor

AgentDoor is the pre-auth layer for the agentic internet. It lets AI agents register, authenticate, and pay for your API programmatically in under 500ms — with zero browser automation.
Make your website agent-ready in 3 lines of code. Let AI agents discover, register, and use your API without opening a browser or filling forms.

The Problem

AI agents can pay for APIs (x402), discover tools (MCP), and talk to each other (A2A). But they still can’t sign up for your product without opening a browser, filling out forms, and solving CAPTCHAs. The pre-auth funnel — registration → credential issuance → billing setup — was designed entirely for humans. Agents resort to slow (30–60s), fragile browser automation that breaks on every UI change.

What agents do today

Browser automation to navigate signup flows30-60 seconds per registrationBreaks on every UI change

What they should do

One HTTP POST → registered, credentialed, billing-readyUnder 500ms totalNo browser required

How It Works

AgentDoor implements a lightweight protocol for headless agent onboarding:
1

Discovery

Agent fetches /.well-known/agentdoor.json to discover available scopes, pricing, and endpoints.~50ms
2

Registration

Agent sends public key and requested scopes to /agentdoor/register. Server responds with a challenge nonce.~100ms
3

Challenge-Response

Agent signs the nonce with its private key and sends to /agentdoor/register/verify. Server issues API key + JWT.~200ms
4

Authenticated Requests

Agent makes requests with Authorization: Bearer header. Private key never transmitted.Ongoing
Total time: < 500ms (Compare: browser automation = 30–60s)

Key Features

3-Line Integration

Add AgentDoor middleware to your Express, Next.js, Hono, or Fastify app. Discovery, registration, and auth endpoints are auto-generated.

Zero Native Dependencies

Pure JavaScript crypto (tweetnacl). No node-gyp. Works everywhere: Node, Deno, Bun, Cloudflare Workers.

Headless Auth

Ed25519 challenge-response authentication. No passwords, no OAuth consent screens, no browser redirects.

Built-in Payments

x402 protocol support. Agents auto-configure payments at registration time.

Works With Your Auth

Sits alongside Clerk, Auth0, Firebase. Human users keep using your existing auth. Agents get their own headless path.

Framework Agnostic

Express, Next.js, Hono, Fastify, FastAPI. Plus companion plugins for Auth0, Clerk, Firebase, Supabase, and more.

Why AgentDoor?

Speed

MethodTimeRound-trips
Browser automation30-60sMany
OAuth 2.13-5s5+
AgentDoor<500ms2

Security

Private keys never leave the agent. Every token refresh requires signing a fresh challenge with the Ed25519 private key — more secure than typical refresh tokens.

Developer Experience

For SaaS owners: 3 lines to make your API agent-ready For agent developers: 1 line to connect to any AgentDoor-enabled service

Technical Highlights

  • < 5ms auth verification — Ed25519 signature verification is extremely fast
  • < 2ms middleware overhead — Minimal impact on request latency
  • < 50KB SDK — Lightweight for constrained agent environments
  • Pluggable storage — In-memory (dev) → SQLite → Postgres
  • Node.js >= 18 — Native crypto, ES modules, async/await

Cross-Protocol Auto-Generation

One AgentDoor integration auto-generates companion protocol files:
FileProtocolStatus
/.well-known/agentdoor.jsonAgentDoorPrimary
/.well-known/agent-card.jsonA2A (Google)Auto-generated
/.well-known/oauth-authorization-serverOAuth 2.1Optional

Next Steps

Quickstart

Get your first agent-ready API running in 5 minutes

Installation

Install AgentDoor for your framework

Configuration

Learn about scopes, pricing, rate limits, and x402 payments

Agent SDK

Build agents that connect to AgentDoor-enabled services

Community

AgentDoor is currently in beta. The protocol is stable, but APIs may change before v1.0. Use in production at your own discretion.

Build docs developers (and LLMs) love