Signing up for a service long meant the same handoff: a human opens a browser, registers, generates an API key, and pastes it somewhere a workflow or agent can read it. That model breaks down when the one doing the work is the agent itself. Every manual handoff is friction, and a place a key can leak.

Alpic is now one of the first auth.md-compatible services. Autonomous agents can build an MCP app with Skybridge (or another framework), register for an Alpic account via auth.md, and run the Alpic CLI to ship, end to end, without human intervention.

What is auth.md?

auth.md is an open protocol designed by WorkOS that gives services a standard way for agents to register without a human in the loop. A service publishes an AUTH.md file describing how agents can register, you can picture it as a service-specific skill describing registration steps for your service. When an agent's identity provider (OpenAI, Anthropic, Cursor, and others) can vouch for the user behind it, the agent requests a scoped identity assertion (an ID-JAG) and presents it directly. The service verifies it against the provider's public keys and issues credentials synchronously, with no one-time passwords or email round-trip.

Humans can claim resources the agent created during its work at a later stage, when the POC proved successful and you need to be back in the control seat.

Why did we implement it?

This isn't a new direction for Alpic, but it is a new commitment. We've treated agents as first-class users of our tooling since the beginning.

Skybridge ships with Skills that help agents scaffold and walk through projects. The CLI was designed from the ground up to be agent-readable, with unabbreviated commands to eliminate ambiguity and full statelessness so no implicit session context is required. auth.md takes it further: not just making Alpic easy to use once an agent has an account, but letting the agent get the account in the first place.

We're building Alpic for a world where agents are not occasional users of developer tools but a primary audience for them. auth.md is just one more piece of that puzzle.