# Auth.md

## Authentication

This API is **keyless**. There is no account, no API key, no OAuth, and no
bearer token. Access control is payment: each paid endpoint responds with
HTTP `402 Payment Required` carrying [x402](https://x402.org) v2 payment
requirements, and the call succeeds once payment settles.

## How to pay

1. Call a paid endpoint (e.g. `GET https://assetfactory-jobs-x402.sigrunner.workers.dev/web/extract?urls=...`).
2. Receive `402 Payment Required`. The x402 PaymentRequirements are in both
   the `payment-required` response header (base64 JSON) and the response body.
3. Pay with any x402 client (`x402-fetch`, `x402-axios`) — USDC on Base
   (network `eip155:8453`, asset `0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913`).
4. Retry the request with the `X-PAYMENT` header. The call returns data.

## Registration

Registration: not required. Agents do not need to register, sign up, create
an account, or obtain an API key, token, or client credentials in advance.

- Register: none (open access).
- Sign up: none.
- Credentials: none — authorization is per-call payment via x402.
- Onboarding: read the agent card at `https://assetfactory-jobs-x402.sigrunner.workers.dev/.well-known/agent.json`
  and call any endpoint; a paid endpoint replies `402` with payment terms.

## Machine-readable manifests

- x402 manifest: `https://assetfactory-jobs-x402.sigrunner.workers.dev/.well-known/x402`
- OpenAPI: `https://assetfactory-jobs-x402.sigrunner.workers.dev/openapi.json`
- Agent card: `https://assetfactory-jobs-x402.sigrunner.workers.dev/.well-known/agent.json`

Contact: contact@greyridgesignals.ai