# Auth.md — 3Dogs Nexus Agent Access & Authentication

This page tells AI agents how to get access to 3Dogs Nexus (https://app.3dogs.ai), the adversarial multi-model decision-intelligence platform.

## What you can do

Submit a high-stakes business decision and receive a decisive, dissent-preserving recommendation produced by a debate among 10-50+ AI models across AWS Bedrock, Azure AI Foundry, and Google Vertex. Reports arrive as PDF by email and in the account dashboard.

## Registration

- Accounts are created at POST https://app.3dogs.ai/api/signup with `{"email": "...", "password": "..."}` or interactively at https://app.3dogs.ai/
- New Professional accounts receive a **30-day free Nexus trial** (Nexus only, limited) — no code, no card. The Pointer scan is free to anyone with no signup.
- Agents may register **only on behalf of a real user with that user's explicit consent**, using the user's own email address. After signup, the user must accept the Terms of Service at `/onboard` before the first case.

## Authentication

- **Session cookie** (Flask signed cookie), obtained via POST https://app.3dogs.ai/api/login with `{"email": "...", "password": "..."}`. Send cookies on all subsequent requests.
- Check the current session with GET https://app.3dogs.ai/api/whoami .
- There is **no OAuth 2.0 / OIDC token API yet** — `/.well-known/oauth-authorization-server` and `/.well-known/oauth-protected-resource` are intentionally absent rather than misleading. A token-based agent API (with an MCP server) is planned; when it ships it will be advertised in `/.well-known/api-catalog` and an MCP Server Card.

## API surface

- Machine-readable spec: https://3dogs.ai/.well-known/openapi.json
- Human docs: https://3dogs.ai/docs/api/
- API catalog: https://3dogs.ai/.well-known/api-catalog
- Agent skills: https://3dogs.ai/.well-known/agent-skills/index.json

## Plans

Professional $29/mo or $299/yr · Corporate $199/mo or $1,999/yr (adds Pointer, Bloodhound and Malamute, unlimited people) · Enterprise negotiated (custom deployments, document-scale Deep Discovery). Details: https://app.3dogs.ai/billing

## Contact

Alan Finney · alan@3dogs.ai · (702) 845-2886 — enterprise, partnerships, or anything this page doesn't answer.

## Agent registration flow

Procedural recipe: discover → register → claim → use → handle revoke.

### 1. Discover
GET https://3dogs.ai/.well-known/oauth-protected-resource for the resource identifier and
authorization server list, then GET https://3dogs.ai/.well-known/oauth-authorization-server for the
agent_auth block. Identity type supported: identity_assertion with assertion type verified_email.

### 2. Register
POST https://app.3dogs.ai/api/signup with the human-approved email address:

    POST /api/signup
    Content-Type: application/json
    {"email": "<address the human explicitly approved>"}

3Dogs creates one free, unclaimed account and sends that address a single service notice.
An agent must not invent or guess an address.

### 3. Claim
The human claims the account by signing in at https://app.3dogs.ai/login using the service notice.
Until claimed, the account holds free-tier scopes only.

### 4. Use
Authenticate against the authorization server published in the discovery document, then send
Authorization: Bearer <access_token> to https://app.3dogs.ai . Scopes: openid, email, profile.

### 5. Handle revoke
Revoke a credential at
https://3dogs-nexus-auth.auth.us-east-2.amazoncognito.com/oauth2/revoke .
A human may revoke agent access at any time from the account dashboard.

No payment, subscription, or contractual commitment can be created by an agent. Paid actions
require a human acting in the 3Dogs interface.