Secure and scale your APIs, apps and other products without breaking your wallet with AuthPI's identity & security platform.https://authpi.com/https://authpi.com/docs/concepts/architecture/https://authpi.com/docs/concepts/architecture/How AuthPI's distributed architecture delivers global compliance and low-latency authentication without complexity.https://authpi.com/docs/ai/https://authpi.com/docs/ai/How to consume AuthPI's documentation and integrate AuthPI programmatically — markdown mirrors, llms.txt, machine-readable specs, and a compact integration recipe.https://authpi.com/docs/concepts/agents/https://authpi.com/docs/concepts/agents/Agents are first-class non-human identities in AuthPI, distinct from users and API keys, with their own credentials, scopes, org memberships, and audit trail.https://authpi.com/docs/concepts/clients/https://authpi.com/docs/concepts/clients/Learn how Clients represent your applications and enable OAuth 2.0/OIDC authentication flows.https://authpi.com/docs/concepts/credits-and-billing/https://authpi.com/docs/concepts/credits-and-billing/Pay for AuthPI API usage on-chain with the x402 standard — no Stripe, no monthly invoice, just sign and ship.https://authpi.com/docs/concepts/issuers/https://authpi.com/docs/concepts/issuers/Learn what Issuers are, what they control, and how to configure them for your applications.https://authpi.com/docs/concepts/multi-org-tokens/https://authpi.com/docs/concepts/multi-org-tokens/How AuthPI embeds active organization memberships in tokens, how selected-org tokens work, and how your resource server authorizes per org.https://authpi.com/docs/concepts/organizations/https://authpi.com/docs/concepts/organizations/Learn how Organizations enable multi-tenancy, team management, and B2B features in AuthPI.https://authpi.com/docs/concepts/events/https://authpi.com/docs/concepts/events/Complete reference of all events emitted by AuthPI for webhooks, audit logs, and integrations.https://authpi.com/docs/concepts/overview/https://authpi.com/docs/concepts/overview/Understand the key concepts of AuthPI, including issuers, portals and protocols.https://authpi.com/docs/getting-started/account/https://authpi.com/docs/getting-started/account/How to register for an AuthPI account.https://authpi.com/docs/guides/agent-identities/https://authpi.com/docs/guides/agent-identities/Create an AI agent identity in AuthPI, issue it a secret, authenticate with client_credentials, validate agent tokens, and manage its lifecycle.https://authpi.com/docs/guides/api-keys/https://authpi.com/docs/guides/api-keys/Create, scope, rotate, and revoke organization API keys for the AuthPI Core API — covering scopes, IP allowlists, expiry, and one-time secrets.https://authpi.com/docs/guides/invitations/https://authpi.com/docs/guides/invitations/Create, send, and manage organization invitations with the AuthPI Core API — inviter attribution, the invitee journey, lifecycle states, resend semantics, and events.https://authpi.com/docs/guides/metadata/https://authpi.com/docs/guides/metadata/Learn how to use metadata to store internal data on AuthPI resources.https://authpi.com/docs/concepts/users/https://authpi.com/docs/concepts/users/Learn how Users work in AuthPI, including authentication, profiles, sessions, and lifecycle management.https://authpi.com/docs/guides/org-lifecycle/https://authpi.com/docs/guides/org-lifecycle/The operational contract for AuthPI organizations — ID stability, suspension semantics, hard-delete cascade, and exactly when membership changes reach tokens.https://authpi.com/docs/guides/m2m-auth/https://authpi.com/docs/guides/m2m-auth/Choose the right machine-to-machine credential on AuthPI — org API keys for the Core API, client_credentials for your own APIs, or agent identities.https://authpi.com/docs/guides/session-management/https://authpi.com/docs/guides/session-management/List, revoke, and suspend user sessions on AuthPI — log a user out everywhere, understand what revocation does to tokens, and the full kill-switch sequence for compromised accounts.https://authpi.com/docs/guides/validate-tokens/https://authpi.com/docs/guides/validate-tokens/Verify AuthPI access tokens in your backend with jose or PyJWT — signature checks via JWKS, issuer/audience validation, the at+jwt header, scope checks, and unknown-kid handling.https://authpi.com/docs/guides/webhooks/https://authpi.com/docs/guides/webhooks/Learn how to set up webhooks to receive real-time notifications about events in your AuthPI account.https://authpi.com/docs/quickstarts/agents/https://authpi.com/docs/quickstarts/agents/Create an agent identity, add a secret verifier, mint a five-minute OAuth token via client_credentials, and validate it in your API with jose.https://authpi.com/docs/quickstarts/cloudflare-workers/https://authpi.com/docs/quickstarts/cloudflare-workers/Protect a Cloudflare Workers API with AuthPI access tokens — JWT verification with jose, scope-based authorization, local testing, and deploy.https://authpi.com/docs/guides/x402-agent-auth/https://authpi.com/docs/guides/x402-agent-auth/Bind x402-paying wallets to stable agent identities — add CAIP-2 wallet verifiers, resolve a payer wallet to an agent, and scope what it may do.https://authpi.com/docs/quickstarts/hono/https://authpi.com/docs/quickstarts/hono/Add authentication to your [Hono](https://hono.dev) app with AuthPI — using the AuthPI SDK or any OIDC client library.https://authpi.com/docs/quickstarts/nextjs/https://authpi.com/docs/quickstarts/nextjs/Add authentication to your [Next.js](https://nextjs.org) app with AuthPI — using the AuthPI SDK or any OIDC client library.https://authpi.com/docs/quickstarts/typescript-backend/https://authpi.com/docs/quickstarts/typescript-backend/Authenticate users in a Node.js backend with @authpi/idp — authorization-code flow with PKCE, callback handling, session refresh, and per-organization authorization, step by step.https://authpi.com/docs/sdks/admin-python/https://authpi.com/docs/sdks/admin-python/Manage AuthPI from Python backends with authpi-admin — async-first issuer, user, organization, and webhook management with typed models and auto-pagination.https://authpi.com/docs/sdks/admin-typescript/https://authpi.com/docs/sdks/admin-typescript/Manage AuthPI from TypeScript backends with @authpi/admin — issuers, users, organizations, webhooks, and API keys, with typed responses, retries, and auto-pagination.https://authpi.com/docs/reference/errors/https://authpi.com/docs/reference/errors/Learn more about error codes returned by our APIs and how to handle them.https://authpi.com/docs/sdks/idp-python/https://authpi.com/docs/sdks/idp-python/Add AuthPI login to Python backends with authpi-idp — the OIDC authorization-code flow with PKCE, token refresh, and per-organization authorization checks.https://authpi.com/docs/reference/conditional-requests/https://authpi.com/docs/reference/conditional-requests/Use ETags and the If-Match header for optimistic concurrency control — prevent silent data loss when multiple clients update the same resource.https://authpi.com/docs/reference/idempotency/https://authpi.com/docs/reference/idempotency/Safely retry POST requests without creating duplicate resources using the Idempotency-Key header.https://authpi.com/docs/sdks/idp-typescript/https://authpi.com/docs/sdks/idp-typescript/Add AuthPI login to TypeScript backends with @authpi/idp — the OIDC authorization-code flow with PKCE, client_credentials for M2M, token refresh, and per-organization authorization checks.https://authpi.com/docs/reference/jwks-key-rotation/https://authpi.com/docs/reference/jwks-key-rotation/How AuthPI publishes and rotates JWT signing keys: the JWKS endpoint, monthly rotation cadence, the 45-day overlap guarantee, the enforced 21-day token-lifetime cap, caching headers, and unknown-kid handling.https://authpi.com/docs/reference/rate-limits/https://authpi.com/docs/reference/rate-limits/Learn more about rate limits for our APIs and how to handle them.https://authpi.com/docs/reference/oidc/https://authpi.com/docs/reference/oidc/Complete reference of OAuth 2.0 and OpenID Connect standards implemented by AuthPI.https://authpi.com/docs/reference/token-claims/https://authpi.com/docs/reference/token-claims/Complete reference for AuthPI JWT claims: access, ID, and refresh token payloads, organization claims, aud precedence rules, and TTL configuration.