Agent-native onboarding

Complete AgentID authorization-code verification

Exchanges an AgentID authorization code with PKCE, verifies ES256 issuer, audience, nonce, stable subject, and live inbox, and marks the pending signup identity-verified. The callback never returns a Locus credential; the agent replays POST /credits/agent/register to receive it. This is the only AgentID callback: an MCP authorization started at /credits/mcp/oauth/authorize/agentid returns here with its lmo_req_ state and is redirected to the MCP client's registered callback with an authorization code or OAuth error.

get/credits/agent/identity/agentid/callback

Request

  • Base URL
    https://api.paywithlocus.com/api
  • URL
    https://api.paywithlocus.com/api/credits/agent/identity/agentid/callback
  • Auth
    none required

Query parameters

codestring required
statestring required
iss'https://auth.agentid.com' required

Required RFC 9207 authorization-response issuer; it must match the trusted AgentID issuer.

Response

Static success page; replay registration to activate

Changes

No recorded changes to this operation across all 1 revision of this API.