Authdog is the identity provider. The agent framework keeps the auth hook it already has. You register the caller, mint a short-lived bearer, and verify that bearer before the agent, tool, or graph runs.
Use this section when a person is not sitting in a browser session. An agent that signs into your product UI uses Agent Sign-In.
Start here
| You are | Open |
|---|---|
| Letting a coding agent read Authdog docs | Skills |
| Letting that agent change tenants, projects, or users | Use Authdog's MCP server |
| Putting Authdog on A2A, Eve, MCP, LangGraph, or the OpenAI Agents SDK | The framework group in the sidebar |
| Building the MCP server your users' agents call | Build an MCP server |
| Connecting an MCP client to that server | Connect an MCP client |
One bearer, five hooks
Mint the access token once, with client_credentials. Present it on the hook the framework already exposes. The shared exchange, the userinfo result, and what to do after the subject is known are in Agent frameworks.
| Framework | Hook | Guide |
|---|---|---|
| A2A | Agent card, then require_auth on the JSON-RPC mount |
A2A |
| Eve | Channel auth walk: oidc({ issuer, audiences }) |
Eve |
| MCP | token_verifier on your MCP server |
MCP agents |
| LangGraph | require_auth on POST /invoke |
LangGraph |
| OpenAI Agents SDK | Tool RunContext, then require_auth on your API |
OpenAI Agents SDK |
Each group has the same four follow-ups: the auth boundary, machine credentials, tool checks, and what you put in the prompt. Getting started is the sample.
The Agents module is sales-gated. Until access is approved, an M2M application issues the same client_credentials grant.
Three different MCP servers
| Name | What it is |
|---|---|
| Authdog's MCP server | https://api.authdog.com/mcp. Control-plane tools for the signed-in account. |
| Your MCP server | The resource your users' agents call. You verify the bearer. |
| MCP client login | Hosted OAuth so that client can obtain a user token. |
Related
| Read | To learn how to |
|---|---|
| Agent frameworks | Mint the bearer and read the userinfo result |
| Machine identity | Choose M2M, Agents, a service account, or a PAT |
| Agents quickstart | Register an agent and mint the first token |
| AgentSec | See the full agent security story |