Immersive Commons · Authentication Profile

Immersive Commons Authentication

Authentication

Immersive Commons issues per‑user agent tokens that are sent as a Bearer token in the Authorization header.

Immersive Commons declares 1 security scheme(s) across its OpenAPI definitions.

Artificial IntelligenceCommunityPhysicalSpaceBuilderImmersive

Methods: Schemes: 1 OAuth flows: API key in:

Security Schemes

Bearer http-bearer

· flows: , ,

Source

Authentication Profile

generated: '2026-11-12'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://www.immersivecommons.com/.well-known/oauth-protected-resource
sources:
- https://www.immersivecommons.com/.well-known/oauth-protected-resource
- https://www.immersivecommons.com/auth.md
- https://www.immersivecommons.com/skills/ic-onboarding/SKILL.md
description: Immersive Commons issues per‑user agent tokens that are sent as a Bearer token in the Authorization header.
schemes:
- type: http-bearer
  name: Bearer
  evidence: 'Bearer `agt_<base64url-32bytes>`, sent as `Authorization: Bearer agt_...`.'
  location: header
  header: Authorization
  flows:
  - sandbox_mint
  - device_code
  - browser_mint
  authorize_url: https://www.immersivecommons.com/signup-with-agent
  scopes:
  - read:public
  - membership:read
  - membership:write
  - profile:publish
  - events:read_upcoming
  - events:rsvp
  - directory:search
  - resources:read
  - resources:book
  - context:read
  - events:submit_recap
  - events:request
  - leaderboard:manage
  - github:link
  - research:query
  - research:submit
  - feedback:submit
  - feedback:read
  - keys:request
  - headsets:read
  - headsets:lend
  - headsets:report_damage
  - agent:directory:read
  - agent:thread:write
  - agent:inbox:read
  - agent:inbox:write
  - agent:policy:read
  - agent:policy:write
  - agent:request_meeting
  - agent:send_intro
  - agent:ping
  - agent:message
  - startup:edit
  - rooms:join
  - calls:join
  - calls:listen
  - calls:act
  - notify:manage
  - files:read
  - files:write
  - transcribe:submit
  - transcribe:read
  - memory:read
  - memory:write
  - prints:submit
  - prints:read
  - prints:manage
  - prints:submit_on_behalf
  - agent:token:verify
  - endpoints:read
  - endpoints:register
  - funko:read
  - funko:write
  - wallet:read
  - wallet:prepare
  - wallet:offerings
  - forms:submit
  - scheduling:book
  - scheduling:manage
  - forms:review
  - hack:read
  - hack:register
  - hack:team
  - hack:submit
  - hack:mentor
  - hack:judge
  - hack:sponsor
  - hack:ops
  - hack:manage
  - hack:admin
  - admin:tier_review
  - admin:highlights_review
  - admin:events_review
  - admin:manifest_edit
  - admin:roster_sync
  - admin:headsets_review
  - admin:feedback_review
  - admin:leaderboard_review
  - admin:agent_clients
  - admin:llm_keys
  - admin:ownership_review
  - admin:content_review
  - admin:endpoints_review
  - admin:funko_review
  - admin:beta_review
  - admin:forms_manage
  - admin:offerings_review
  - conferences:read
  - conferences:write
  how_to_obtain: 'Sandbox mint: POST https://www.immersivecommons.com/api/agent/sandbox/mint returns a bearer token. Device‑code flow: POST https://www.immersivecommons.com/api/agent/signup/start
    to get a device_code, then poll GET https://www.immersivecommons.com/api/agent/signup/poll?device_code=... until a token is returned. Browser
    mint: human signs in at https://www.immersivecommons.com/floor10/agent-console, selects scopes, clicks Mint and copies the plaintext token.'
docs: https://www.immersivecommons.com/.well-known/oauth-protected-resource

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/immersivecommons-com-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.