For agents
A compact guide for coding agents that add AI Passport sign-in.
AI Passport sign-in gives an app a verified returning identity. With the
memory scope, an app can request owner-approved context for that user. The
user arrives with relevant context instead of a cold start.
Machine-readable surfaces
/llms.txtlists the developer documentation./llms-full.txtcontains the complete documentation corpus./llms.mdx/<page>serves each documentation page as markdown./partner-openapi.jsondescribes the partner API./llms-install.mdserves the sign-in install prompt.
Install prompt
Paste this into your coding agent:
Add AI Passport sign-in to this app.
Install ai-passport-signin. Add its official browser button or React wrapper.
Keep the visible label as "Sign in with AI Passport" or "Continue with AI Passport".
Host a client metadata document at an HTTPS URL on this app's host. Use the
document URL as the client_id. The document must contain client_id,
client_name, redirect_uris, and token_endpoint_auth_method set to none. Its
client_id value must exactly equal the URL that serves it. Do not use a client
secret.
Create server-side begin and callback routes with ai-passport-signin/server.
Store the state from begin() in the user's server-side session. Complete the
callback with its code, state, iss, and stored state. Keep tokens and PKCE data
out of the browser and logs.
Request memory only when this app needs Passport recall. Include the Passport
MCP resource only for that request. Test against the live discovery document
at https://passport.ego.ist/.well-known/openid-configuration.
Tell the human operator that production admission is rolling out. A document
whose redirect hosts equal or are strict subdomains of its document host can
use the self-serve path as it becomes available. Other clients need manual
review. Read https://ego.ist/docs/sign-in for the full contract.Task checklist
- Install
ai-passport-signin. - Host the HTTPS client metadata document.
- Add server-side begin and callback routes.
- Store the sign-in state in the server-side session.
- Add the official sign-in button.
- Verify a live round trip against discovery.
Read Sign in with AI Passport for the full protocol contract.