Authdog is the identity provider. The agent framework keeps the auth hook it already has. You register the caller, mint a short-lived bearer, and verify that bearer before the agent, tool, or graph runs.

Use this section when a person is not sitting in a browser session. An agent that signs into your product UI uses [Agent Sign-In](/docs/agent-sign-in).

## Start here

| You are | Open |
| --- | --- |
| Letting a coding agent read Authdog docs | [Skills](/docs/ai/skills) |
| Letting that agent change tenants, projects, or users | [Use Authdog's MCP server](/docs/ai/mcp-server) |
| Putting Authdog on A2A, Eve, MCP, LangGraph, or the OpenAI Agents SDK | The framework group in the sidebar |
| Building the MCP server your users' agents call | [Build an MCP server](/docs/ai/mcp-development/build-server) |
| Connecting an MCP client to that server | [Connect an MCP client](/docs/ai/mcp-development/connect-client) |

## One bearer, five hooks

Mint the access token once, with `client_credentials`. Present it on the hook the framework already exposes. The shared exchange, the userinfo result, and what to do after the subject is known are in [Agent frameworks](/docs/agent-frameworks).

| Framework | Hook | Guide |
| --- | --- | --- |
| A2A | Agent card, then `require_auth` on the JSON-RPC mount | [A2A](/docs/agent-frameworks/a2a) |
| Eve | Channel `auth` walk: `oidc({ issuer, audiences })` | [Eve](/docs/agent-frameworks/eve) |
| MCP | `token_verifier` on your MCP server | [MCP agents](/docs/agent-frameworks/mcp) |
| LangGraph | `require_auth` on `POST /invoke` | [LangGraph](/docs/agent-frameworks/langgraph) |
| OpenAI Agents SDK | Tool `RunContext`, then `require_auth` on your API | [OpenAI Agents SDK](/docs/agent-frameworks/openai-agents) |

Each group has the same four follow-ups: the auth boundary, machine credentials, tool checks, and what you put in the prompt. Getting started is the sample.

The Agents module is sales-gated. Until access is approved, an [M2M application](/docs/machine-identity) issues the same `client_credentials` grant.

## Three different MCP servers

| Name | What it is |
| --- | --- |
| Authdog's MCP server | `https://api.authdog.com/mcp`. Control-plane tools for the signed-in account. |
| Your MCP server | The resource your users' agents call. You verify the bearer. |
| MCP client login | Hosted OAuth so that client can obtain a user token. |

## Related

| Read | To learn how to |
| --- | --- |
| [Agent frameworks](/docs/agent-frameworks) | Mint the bearer and read the userinfo result |
| [Machine identity](/docs/machine-identity) | Choose M2M, Agents, a service account, or a PAT |
| [Agents quickstart](/docs/quickstarts/agents) | Register an agent and mint the first token |
| [AgentSec](/docs/agentsec) | See the full agent security story |