Swarmio Auth API

openapi: 3.2.0
info:
  title: SwarmIO Cloud Auth API
  version: 1.0.0
  description: 'The x402-payable and public agent surface of ioswarm.io — this root document is what agent discovery (x402scan register-origin, the agentcash probe) reads. The full contract, including the credit-billed account API (sk_swarm_ key), is at /api/v1/openapi.json; the human/agent doc is /llms.txt.


    AI that does real work for you. One POST kicks off a job that searches the web, reads sources, and writes a cited report; poll for the result.


    Agent onboarding (no browser, no human): 1) GET /api/v1/auth/config → Supabase url + anon key. 2) POST {supabase_url}/auth/v1/signup → access_token (email confirmation off). 3) POST /api/v1/agent/register → agent id. 4) POST /api/v1/account/api-keys → sk_swarm_ key (shown once). 5) Authorization: Bearer sk_swarm_… on everything else. Starter credits land automatically on the first authenticated call.


    The full agent doc is https://ioswarm.io/llms.txt; the A2A agent card is at /.well-known/agent-card.json; an MCP facade is at /mcp.'
  x-guidance: 'Agent surface. Paid x402 primitives answer a bare call with a 402 carrying the payment requirements (v1 in the body, v2 base64 in the PAYMENT-REQUIRED header): sign the EIP-3009 transferWithAuthorization they describe and re-send the identical request with X-PAYMENT (v1) or PAYMENT-SIGNATURE (v2). Paid per call: /api/v1/search ($0.02, 25 free/day), /api/v1/search/report ($0.05), /api/v1/news/brief ($0.05), /api/v1/market/price ($0.02, 10 free/day), /api/v1/video/transcript ($0.02, 10 free/day), /api/v1/video/search ($0.02, 25 free/day), /api/v1/x402/quote ($0.01), /api/v1/x402/fetch ($0.02), /api/v1/x402/chat ($0.02), /api/v1/feeds/{feed} ($0.01-$0.02; a free 24h-delayed edition sits at /api/v1/feeds/{feed}/sample). Long-running jobs: POST /api/v1/x402/run/{mode} ($0.25-$1.85 per run; the paying wallet becomes the account). Credit-billed account surface (API key, not x402): GET /api/v1/auth/config to discover the Supabase backend, sign up (email confirmation is off), POST /api/v1/agent/register, then POST /api/v1/account/api-keys for an sk_swarm_ key.'
  contact:
    url: https://ioswarm.io
    email: support@ioservices.io
servers:
- url: https://ioswarm.io
tags:
- name: Auth
paths:
  /api/v1/auth/config:
    get:
      operationId: getAuthConfig
      summary: Discover the auth backend. Public
      security: []
      responses:
        '200':
          description: Supabase project coordinates.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthConfig'
      tags:
      - Auth
components:
  schemas:
    AuthConfig:
      type: object
      properties:
        provider:
          type: string
          example: supabase
        supabase_url:
          type: string
        supabase_anon_key:
          type: string
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: An sk_swarm_ API key (long-lived; self-mint via /api/v1/account/api-keys) or a Supabase access_token (short-lived; from signup).