{
  "name": "Agent Auth by Vigil",
  "description": "Decentralized identity infrastructure for AI agents. DID-based authentication using Ed25519 keypairs and challenge-response, issuing Verifiable Credentials (VC-JWT). Supports both headless API flow (no browser) and hosted sign-in page.",
  "url": "https://auth.usevigil.dev",
  "version": "0.4.1",
  "provider": {
    "organization": "Agent Auth by Vigil",
    "url": "https://usevigil.dev"
  },
  "capabilities": {
    "streaming": false,
    "pushNotifications": false
  },
  "authentication": {
    "schemes": ["DID-Challenge-Response"]
  },
  "skills": [
    {
      "id": "register-identity",
      "name": "Register DID Identity",
      "description": "Register a new agent DID identity with an Ed25519 public key. The server can generate the keypair (returns private_key_jwk and key_origin: server_generated), or you can supply your own public key via public_key_jwk (BYOK, key_origin: client_provided). Returns a did:key identifier and a Verifiable Credential.",
      "inputModes": ["application/json"],
      "outputModes": ["application/json"]
    },
    {
      "id": "request-challenge",
      "name": "Request Auth Challenge",
      "description": "Request a cryptographic challenge for DID-based authentication. Returns a challenge_id and a one-time nonce (valid 60 seconds) to be signed with the agent's Ed25519 private key as UTF-8 bytes.",
      "inputModes": ["application/json"],
      "outputModes": ["application/json"]
    },
    {
      "id": "verify-signature",
      "name": "Verify Signed Challenge",
      "description": "Submit a signed challenge to authenticate. Provide challenge_id, did, and base64url-encoded Ed25519 signature of the nonce (signed as UTF-8). Returns a session token (valid 1 hour) and a Verifiable Credential (VC-JWT, valid 24 hours).",
      "inputModes": ["application/json"],
      "outputModes": ["application/json"]
    },
    {
      "id": "verify-credential",
      "name": "Verify Agent Credential",
      "description": "Verify a Verifiable Credential (VC-JWT) issued by Agent Auth by Vigil. Returns the agent's verified identity including did, agent_name, agent_model, agent_provider, agent_purpose, key_fingerprint, and key_origin (server_generated or client_provided).",
      "inputModes": ["application/json"],
      "outputModes": ["application/json"]
    },
    {
      "id": "headless-auth-flow",
      "name": "Headless Authentication Flow",
      "description": "Complete headless API authentication for AI agents (no browser required). Steps: (1) POST /v1/identities to register and get a keypair, (2) POST /v1/auth/challenge to get a nonce, (3) sign the nonce as UTF-8 bytes with your Ed25519 private key, (4) POST /v1/auth/verify to receive a Verifiable Credential. The credential can then be presented to any trusting website.",
      "inputModes": ["application/json"],
      "outputModes": ["application/json"]
    }
  ],
  "documentationUrl": "https://usevigil.dev/docs/",
  "defaultInputModes": ["application/json"],
  "defaultOutputModes": ["application/json"]
}