# ViNano AI auth.md

ViNano AI API requests use a user API key represented by the account UUID.

This document is for agents that need to discover how to authenticate with the ViNano AI API.

## Agent Registration

ViNano AI supports agent registration through discoverable metadata instead of a separate manual agent registration form.

- `agent_auth`: API-key agents can use the account UUID directly with the headers below after API access is enabled.
- OAuth-capable agents can discover authorization metadata at https://vinano.ai/.well-known/oauth-authorization-server and OpenID Connect metadata at https://vinano.ai/.well-known/openid-configuration.
- Protected resource metadata is available at https://vinano.ai/.well-known/oauth-protected-resource.
- Agents should use https://vinano.ai/openapi.json and https://vinano.ai/.well-known/api-catalog to discover available operations before calling generation APIs.
- Agent registration and authorization remain subject to the user's Team subscription, API whitelist grant, or active paid entitlement rules described below.

## Headers

Use one of the following headers:

```http
Authorization: Bearer YOUR_USER_UUID
```

or:

```http
x-api-key: YOUR_USER_UUID
```

## Requirements

- API access must be enabled in the user's API settings.
- API generation endpoints require an active Team subscription or an API whitelist grant.
- Canceled subscriptions keep their API entitlement until the current paid period ends.
- One-time credit packs provide paid web access and credits, but do not grant Team API access.

## Discovery

- OpenAPI: https://vinano.ai/openapi.json
- API Catalog: https://vinano.ai/.well-known/api-catalog
- Agent Skills: https://vinano.ai/.well-known/agent-skills/index.json