Agentic AI Foundation

Agentic AI Foundation Auth API

Authentication operations for obtaining tokens to publish servers

GitHub OpenAPI

Operations 10

POST /v0.1/auth/dns Exchange DNS signature for Registry JWT #
POST /v0.1/auth/github-at Exchange GitHub OAuth access token for Registry JWT #
POST /v0.1/auth/github-oidc Exchange GitHub OIDC token for Registry JWT #
POST /v0.1/auth/http Exchange HTTP signature for Registry JWT #
POST /v0.1/auth/oidc Exchange OIDC ID token for Registry JWT #
POST /v0/auth/dns Exchange DNS signature for Registry JWT #
POST /v0/auth/github-at Exchange GitHub OAuth access token for Registry JWT #
POST /v0/auth/github-oidc Exchange GitHub OIDC token for Registry JWT #
POST /v0/auth/http Exchange HTTP signature for Registry JWT #
POST /v0/auth/oidc Exchange OIDC ID token for Registry JWT #

Documentation

📖
APIReference
https://registry.modelcontextprotocol.io/docs
📖
Documentation
https://github.com/modelcontextprotocol/registry/tree/main/docs
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/agentic-ai-foundation/refs/heads/main/authentication/agentic-ai-foundation-authentication.yml

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/agentic-ai-foundation/refs/heads/main/openapi/agentic-ai-foundation-auth-api-openapi.yml

SDKs

📦
GitHubRepository
https://github.com/modelcontextprotocol/registry

Other Resources

🔗
ErrorCatalog
https://raw.githubusercontent.com/api-evangelist/agentic-ai-foundation/refs/heads/main/errors/agentic-ai-foundation-problem-types.yml
🔗
DataModel
https://raw.githubusercontent.com/api-evangelist/agentic-ai-foundation/refs/heads/main/data-model/agentic-ai-foundation-data-model.yml
🔗
Conventions
https://raw.githubusercontent.com/api-evangelist/agentic-ai-foundation/refs/heads/main/conventions/agentic-ai-foundation-conventions.yml
🔗
ToolCrosswalk
https://raw.githubusercontent.com/api-evangelist/agentic-ai-foundation/refs/heads/main/mcp/agentic-ai-foundation-tool-crosswalk.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/agentic-ai-foundation-auth-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

agentic-ai-foundation-auth-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  description: 'A community driven registry service for Model Context Protocol (MCP) servers.


    GitHub repository | Documentation'
  title: Official MCP Registry Auth API
  version: 1.0.0
tags:
- description: Authentication operations for obtaining tokens to publish servers
  name: Auth
paths:
  /v0.1/auth/dns:
    post:
      description: Authenticate using DNS TXT record public key and signed timestamp
      operationId: exchange-dns-token-v0.1
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SignatureTokenExchangeInput'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TokenResponse'
          description: OK
        default:
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Error
      summary: Exchange DNS signature for Registry JWT
      tags:
      - Auth
  /v0.1/auth/github-at:
    post:
      description: Exchange a GitHub OAuth access token for a short-lived Registry JWT token
      operationId: exchange-github-token-v0.1
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GitHubTokenExchangeInputBody'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TokenResponse'
          description: OK
        default:
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Error
      summary: Exchange GitHub OAuth access token for Registry JWT
      tags:
      - Auth
  /v0.1/auth/github-oidc:
    post:
      description: Exchange a GitHub Actions OIDC token for a short-lived Registry JWT token
      operationId: exchange-github-oidc-token-v0.1
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GitHubOIDCTokenExchangeInputBody'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TokenResponse'
          description: OK
        default:
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Error
      summary: Exchange GitHub OIDC token for Registry JWT
      tags:
      - Auth
  /v0.1/auth/http:
    post:
      description: Authenticate using HTTP-hosted public key and signed timestamp
      operationId: exchange-http-token-v0.1
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SignatureTokenExchangeInput'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TokenResponse'
          description: OK
        default:
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Error
      summary: Exchange HTTP signature for Registry JWT
      tags:
      - Auth
  /v0.1/auth/oidc:
    post:
      description: Exchange an OIDC ID token from any configured provider for a short-lived Registry JWT token
      operationId: exchange-oidc-token-v0.1
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OIDCTokenExchangeInputBody'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TokenResponse'
          description: OK
        default:
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Error
      summary: Exchange OIDC ID token for Registry JWT
      tags:
      - Auth
  /v0/auth/dns:
    post:
      description: Authenticate using DNS TXT record public key and signed timestamp
      operationId: exchange-dns-token-v0
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SignatureTokenExchangeInput'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TokenResponse'
          description: OK
        default:
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Error
      summary: Exchange DNS signature for Registry JWT
      tags:
      - Auth
  /v0/auth/github-at:
    post:
      description: Exchange a GitHub OAuth access token for a short-lived Registry JWT token
      operationId: exchange-github-token-v0
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GitHubTokenExchangeInputBody'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TokenResponse'
          description: OK
        default:
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Error
      summary: Exchange GitHub OAuth access token for Registry JWT
      tags:
      - Auth
  /v0/auth/github-oidc:
    post:
      description: Exchange a GitHub Actions OIDC token for a short-lived Registry JWT token
      operationId: exchange-github-oidc-token-v0
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GitHubOIDCTokenExchangeInputBody'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TokenResponse'
          description: OK
        default:
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Error
      summary: Exchange GitHub OIDC token for Registry JWT
      tags:
      - Auth
  /v0/auth/http:
    post:
      description: Authenticate using HTTP-hosted public key and signed timestamp
      operationId: exchange-http-token-v0
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SignatureTokenExchangeInput'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TokenResponse'
          description: OK
        default:
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Error
      summary: Exchange HTTP signature for Registry JWT
      tags:
      - Auth
  /v0/auth/oidc:
    post:
      description: Exchange an OIDC ID token from any configured provider for a short-lived Registry JWT token
      operationId: exchange-oidc-token-v0
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OIDCTokenExchangeInputBody'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TokenResponse'
          description: OK
        default:
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Error
      summary: Exchange OIDC ID token for Registry JWT
      tags:
      - Auth
components:
  schemas:
    ErrorModel:
      additionalProperties: false
      properties:
        detail:
          description: A human-readable explanation specific to this occurrence of the problem.
          examples:
          - Property foo is required but is missing.
          type: string
        errors:
          description: Optional list of individual error details
          items:
            $ref: '#/components/schemas/ErrorDetail'
          type:
          - array
          - 'null'
        instance:
          description: A URI reference that identifies the specific occurrence of the problem.
          examples:
          - https://example.com/error-log/abc123
          format: uri
          type: string
        status:
          description: HTTP status code
          examples:
          - 400
          format: int64
          type: integer
        title:
          description: A short, human-readable summary of the problem type. This value should not change between occurrences of the error.
          examples:
          - Bad Request
          type: string
        type:
          default: about:blank
          description: A URI reference to human-readable documentation for the error.
          examples:
          - https://example.com/errors/example
          format: uri
          type: string
      type: object
    GitHubOIDCTokenExchangeInputBody:
      additionalProperties: false
      properties:
        oidc_token:
          description: GitHub Actions OIDC token
          type: string
      required:
      - oidc_token
      type: object
    TokenResponse:
      additionalProperties: false
      properties:
        expires_at:
          format: int64
          type: integer
        registry_token:
          type: string
      required:
      - registry_token
      - expires_at
      type: object
    ErrorDetail:
      additionalProperties: false
      properties:
        location:
          description: Where the error occurred, e.g. 'body.items[3].tags' or 'path.thing-id'
          type: string
        message:
          description: Error message text
          type: string
        value:
          description: The value at the given location
      type: object
    OIDCTokenExchangeInputBody:
      additionalProperties: false
      properties:
        oidc_token:
          description: OIDC ID token from any provider
          type: string
      required:
      - oidc_token
      type: object
    SignatureTokenExchangeInput:
      additionalProperties: false
      properties:
        domain:
          description: Domain name
          examples:
          - example.com
          type: string
        signed_timestamp:
          description: Hex-encoded signature of timestamp
          examples:
          - abcdef1234567890
          type: string
        timestamp:
          description: RFC3339 timestamp
          examples:
          - '2023-01-01T00:00:00Z'
          type: string
      required:
      - domain
      - timestamp
      - signed_timestamp
      type: object
    GitHubTokenExchangeInputBody:
      additionalProperties: false
      properties:
        github_token:
          description: GitHub OAuth token
          type: string
      required:
      - github_token
      type: object