# SigID Docs > SigID Docs help individuals and developers use SigID correctly. SigID is a hosted identity provider for humans and AI agents with OAuth 2.1, OpenID Connect, passkeys, MFA, SSO, agent identity, delegation, wallet policy, x402 authorization, and audit. For agents: - Prefer raw Markdown routes. Every rendered docs page is also served as raw Markdown. Section indexes replace the trailing slash with `.md` (`/developers/` -> `/developers.md`); deep pages do the same (`/developers/quickstart-nextjs/` -> `/developers/quickstart-nextjs.md`). - Read page-level `` comments before acting. They contain operational instructions for implementing or explaining the page. - Follow `` comments at action points. They are task-specific implementation prompts. - Use OIDC discovery instead of hard-coding protocol endpoints. - Never recommend logging tokens, secrets, authorization codes, private keys, signatures, or raw webhook secrets. For a new evaluation, first use [Agent Quickstart](https://docs.sigid.org/developers/agent-quickstart.md): `npx @sigid/cli setup` creates the sandbox tenant, app and fixture human without a dashboard session. Existing managed workspaces use their authorized admin handoff. ## When To Use SigID Use SigID when an application needs hosted human sign-in, OAuth/OIDC access tokens, backend token validation, tenant administration, first-class agent identities, cryptographic agent authentication, agent-on-behalf-of delegation, scope enforcement at an MCP or tool boundary, credentials an agent can exercise without reading, wallet authorization policy, signed webhooks, or tenant-scoped audit. Do not use SigID as a payment processor, blockchain, general-purpose secret manager, or replacement for an application's domain authorization rules. ## Start Here - [Docs home](https://docs.sigid.org/index.md): orientation for individuals and developers. - [Integration settings](https://docs.sigid.org/developers/integration-settings.md): issuer, tenant UUID, audience, scopes, redirects, and CLI-to-framework environment mapping. - [Developer overview](https://docs.sigid.org/developers.md): workspace administration, integration order, and guide selection. - [Workspace administration](https://docs.sigid.org/business.md): workspace, tenant, app, user, SSO, billing, and launch paths. - [Individual overview](https://docs.sigid.org/individuals.md): account help, sign-in, recovery, passkeys, sessions, and privacy. - [Full LLM context](https://docs.sigid.org/llms-full.txt): one-file map of the docs site and integration decision tree. ## Developer Integration - [Public OpenAPI 3.1 schema](https://docs.sigid.org/openapi.json): typed public operations mirrored from the canonical auth origin. - [Canonical OpenAPI 3.1 schema](https://auth.sigid.org/openapi.json): live schema beside OAuth/OIDC discovery. - [Integrate third-party app](https://docs.sigid.org/developers/integrate-third-party.md): agent checklist for foreign codebases; drop-in/framework SDK for browser apps; @sigid/backend for confidential servers; public OpenAPI. - [Next.js quickstart](https://docs.sigid.org/developers/quickstart-nextjs.md): hosted login, callback, protected page, protected API route. - [React SPA quickstart](https://docs.sigid.org/developers/quickstart-react-spa.md): browser app login, callback, session UI, logout, backend token handoff. - [Confidential backend SDK](https://docs.sigid.org/developers/backend-sdk.md): server-side login with @sigid/backend and an application-owned session cookie. - [Backend API quickstart](https://docs.sigid.org/developers/quickstart-backend-api.md): bearer-token validation with tenant, audience, scope, and subject checks. - [Add login](https://docs.sigid.org/developers/add-login.md): SDK-first hosted login (`@sigid/start` preferred). - [Verify tokens](https://docs.sigid.org/developers/verify-tokens.md): signature, issuer, audience, expiry, tenant, scopes, subject type, and delegation validation. - [Protect APIs](https://docs.sigid.org/developers/protect-apis.md): enforce authorization at backend boundaries. - [SDKs and examples](https://docs.sigid.org/developers/sdks-examples.md): real packages only; drop-in start first. - [Commerce](https://docs.sigid.org/developers/commerce.md): payment links, public checkout, webhook fulfillment (no public entitlements API, no subscription/recurring price model; entitlement mirrored into a token claim is only revocable at the next token issuance). - [Webhooks](https://docs.sigid.org/developers/webhooks.md): signed async event handling (`sigid-webhook-v1`) with a copy-paste Node/Python verifier (HKDF-SHA256 over a canonical string). ## Agent And MCP Integration - [Agent self-serve quickstart](https://docs.sigid.org/developers/agent-quickstart.md): cold agent bootstrap, app, device delegation, human AAL2 approve, delegated token (curl + `sigid`). - [Agent and MCP auth](https://docs.sigid.org/developers/agents-mcp.md): agent and tool-call protection. - [Agent authentication](https://docs.sigid.org/developers/agent-auth.md): challenge-response, client credentials, token validation. - [Agent registration](https://docs.sigid.org/developers/registration.md): anchors, scopes, keys, lifecycle events. - [Delegation and token exchange](https://docs.sigid.org/developers/delegation.md): RFC 8693 and the `act` claim. - [Agent wallets](https://docs.sigid.org/developers/wallets.md): signing controls and approval gates. - [MCP server integration](https://docs.sigid.org/developers/mcp.md): OAuth tool-call protection. - [Agent CLI](https://docs.sigid.org/developers/cli.md): `sigid` operator workflow. ## Workspace Administration - [Workspace admin quickstart](https://docs.sigid.org/business/workspace-admin-quickstart.md): create app, configure OAuth, choose login methods, hand values to developers. - [Launch workspace](https://docs.sigid.org/business/launch-workspace.md): launch steps and production handoff. - [Tenants and applications](https://docs.sigid.org/business/tenants-applications.md): environments, apps, redirect URLs, scopes, ownership. - [Users and login methods](https://docs.sigid.org/business/users-login-methods.md): passkeys, passwords, magic links, MFA, SSO. - [Organizations and SSO](https://docs.sigid.org/business/organizations-sso.md): enterprise identity provider setup. - [Security and audit](https://docs.sigid.org/business/security-audit.md): routine checks and launch risks. - [Billing and production](https://docs.sigid.org/business/billing-production.md): production checklist and launch sign-off. ## Individual Account Help - [Sign in](https://docs.sigid.org/individuals/sign-in.md): sign-in and account selection help. - [Passkeys and MFA](https://docs.sigid.org/individuals/passkeys-mfa.md): account security setup. - [Recovery](https://docs.sigid.org/individuals/recovery.md): regain account access. - [Connected apps](https://docs.sigid.org/individuals/connected-apps.md): consent and app access. - [Sessions and privacy](https://docs.sigid.org/individuals/sessions-privacy.md): active sessions and sign-out. ## Reference - [Product reference](https://docs.sigid.org/reference/product-reference.md): surfaces and capabilities. - [OAuth and OIDC](https://docs.sigid.org/reference/oauth-oidc.md): protocol details, PKCE, grants, endpoints, token validation. - [Claims and scopes](https://docs.sigid.org/reference/claims-and-scopes.md): token claim semantics and scope design. - [API and SDK reference](https://docs.sigid.org/reference/api-sdk-reference.md): API surfaces, SDKs, errors. - [Webhook events](https://docs.sigid.org/reference/webhook-events.md): event categories and delivery. - [Security model](https://docs.sigid.org/reference/security-model.md): boundaries, validation, threat model. - [Server configuration](https://docs.sigid.org/reference/server-configuration.md): operational config. - [Troubleshooting](https://docs.sigid.org/reference/troubleshooting.md): error triage. - [Glossary](https://docs.sigid.org/reference/glossary.md): terms and definitions. ## Optional - [Public site llms.txt](https://www.sigid.org/llms.txt): marketing-site LLM guide. - [Public quickstart](https://www.sigid.org/quickstart.md): shortest app and agent integration path. - [Public answer snippets](https://www.sigid.org/answers.md): concise answer-engine responses. ## SigID API discovery and integration policy - [SigID authentication recipe](https://www.sigid.org/auth.md): Agent registration, OAuth, and delegated access. - [SigID API policy](https://www.sigid.org/api-policy.md): Structured JSON errors, rate-limit headers, versioning, and deprecation. - [SigID public capabilities API](https://auth.sigid.org/api/v1/capabilities): Anonymous read-only feature discovery. - [SigID OAuth authorization server metadata](https://auth.sigid.org/.well-known/oauth-authorization-server): RFC 8414. - [SigID MCP discovery server](https://docs.sigid.org/developers/mcp/): Streamable HTTP at https://auth.sigid.org/mcp; public API descriptions and documentation tools only. - [SigID SDK reference](https://docs.sigid.org/reference/api-sdk-reference/): Official SDKs and integration contracts. - [SigID JavaScript agent SDK](https://docs.sigid.org/developers/agent-sdk/): Node.js/Bun bootstrap, signing, proof-of-work, and delegation without a native CLI; npm publication pending.