# Runner AI — Agent Authentication

Runner AI exposes standard OAuth 2.0 metadata so agents can discover the
authorization and token endpoints programmatically.

## Metadata documents

- Authorization server metadata: https://www.runnerai.com/.well-known/oauth-authorization-server
- Protected resource metadata: https://www.runnerai.com/.well-known/oauth-protected-resource
- API catalog: https://www.runnerai.com/.well-known/api-catalog

## How to authenticate

1. Fetch the authorization server metadata document above to discover the
   `authorization_endpoint`, `token_endpoint`, and supported scopes.
2. Complete the OAuth 2.0 authorization code flow to obtain an access token.
3. Call the API endpoints listed in the API catalog with the access token in
   the `Authorization: Bearer <token>` header.

For the full machine-readable resource list, see the agent manifest:
https://www.runnerai.com/AGENTS.md