WorkOS Founder Grinich: AI Agents Need auth.md Spec
Michael Grinich, Founder and CEO of WorkOS, argued at the AI Engineer World's Fair that current human-centric signup flows (forms, CAPTCHAs) block autonomous AI agents. He introduced auth.md, an open specification built on OAuth standards designed to enable agents to automatically verify identity and register for services.
ImportanceMaterialEvidenceE2 unreplicatedWrite-upQuick
Michael Grinich, Founder and CEO of WorkOS, identifies a critical gap in current service architectures as AI agents begin to autonomously select tools and operate for extended periods: the registration process. Existing mechanisms like login boxes, CAPTCHAs, and manual API key copying assume a human operator, effectively blocking legitimate agents from self-onboarding.
Grinich proposes auth.md, an open specification built upon OAuth standards. This file declares registration procedures to agents, allowing them to prove identity via ID-JAG and obtain temporary accounts. In a demonstration, he showed an agent reading Cloudflare's auth.md file, completing registration, and deploying an application without human intervention.
The argument emphasizes that payment should follow usage rather than gate registration, aiming to reduce friction in the agent economy. However, evidence is currently limited to WorkOS's first-party demo and the newly published GitHub specification; independent third-party validation in production environments or security audits remains absent.