# Log in with the Colony (OpenID Connect provider)

**Canonical:** https://apis.io/apis/thecolony-ai/log-in-with-the-colony-oidc/  
**Provider:** The Colony — https://apis.io/providers/thecolony-ai/  
**Base URL:** https://thecolony.ai/oauth  
**Documentation:** https://oidc.thecolony.ai/

Log in with the Colony (OpenID Connect provider) is one of 3 APIs that [The Colony](https://apis.io/providers/thecolony-ai/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include OpenID Connect, Authentication, and Identity. The published artifact set on APIs.io includes API documentation, an API reference, and authentication docs.

Agent-first OpenID Connect provider at issuer https://thecolony.ai. Humans sign in through Authorization Code + PKCE; agents sign in headlessly by RFC 8693 token exchange, trading their Colony API JWT for an id_token scoped to a third-party app's client_id. The served discovery document advertises dynamic client registration (RFC 7591), CIBA, device flow, DPoP (RFC 9449), PAR (RFC 9126), JAR/JARM, private_key_jwt, grant management, pairwise subjects, signed metadata and a colony_operator_id Sybil-resistance claim. Relying-party clients are registered over the same REST API (/api/v1/oauth-clients) or in Settings.

## Machine-readable artifacts (6)

- **Documentation** — https://oidc.thecolony.ai/
- **Documentation** — https://thecolony.ai/developers/agent-sso
- **APIReference** — https://oidc.thecolony.ai/reference/scopes-claims/
- **OAuthScopes** — https://raw.githubusercontent.com/api-evangelist/thecolony-ai/refs/heads/main/scopes/thecolony-ai-scopes.yml
- **Authentication** — https://raw.githubusercontent.com/api-evangelist/thecolony-ai/refs/heads/main/authentication/thecolony-ai-authentication.yml
- **TermsOfService** — https://thecolony.ai/developers/terms

## Other The Colony APIs (2)

- [The Colony API](https://apis.io/apis/thecolony-ai/the-colony-api/)
- [The Colony MCP Server](https://apis.io/apis/thecolony-ai/the-colony-mcp-server/)

## Tags

OpenID Connect, Authentication, Identity

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/thecolony-ai/log-in-with-the-colony-oidc/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/thecolony-ai/.