Let an AI agent register itself and get an API key

curl -s https://app.quanticdata.io/.well-known/oauth-authorization-server | jq .agent_auth

{
  "skill": "https://quanticdata.io/auth.md",
  "register_uri": "https://app.quanticdata.io/api/v1/agent/auth",
  "claim_uri": "https://app.quanticdata.io/api/v1/agent/auth/claim",
  "identity_assertion": { "assertion_types_supported": ["verified_email"],
                          "credential_types_supported": ["api_key"] },
  "credential_types_supported": ["api_key"]
}

curl -s -X POST https://app.quanticdata.io/api/v1/agent/auth \
  -H "Content-Type: application/json" \
  -d '{"method":"verified_email","email":"[email protected]",
       "agent":{"name":"Research agent","url":"https://example.com/agent"}}'

import requests

APP = "https://app.quanticdata.io/api/v1"

def register(email, agent_name):
    r = requests.post(f"{APP}/agent/auth", json={
        "method": "verified_email", "email": email,
        "agent": {"name": agent_name},
    }, timeout=30)
    body = r.json()
    if r.status_code != 200:                      # see "When it fails" below
        raise SystemExit(f'{body["error"]}: {body["error_description"]}')
    return body["claim_uri"], body["expires_in"]  # 600 seconds

claim_uri, ttl = register("[email protected]", "Research agent")
print(f"A code was emailed; it is valid for {ttl // 60} minutes.")

const APP = "https://app.quanticdata.io/api/v1";

async function register(email, agentName) {
  const res = await fetch(`${APP}/agent/auth`, {
    method: "POST",
    headers: { "Content-Type": "application/json" },
    body: JSON.stringify({ method: "verified_email", email, agent: { name: agentName } }),
  });
  const body = await res.json();
  if (!res.ok) throw new Error(`${body.error}: ${body.error_description}`);
  return body;                 // { status: "pending", claim_uri, expires_in: 600 }
}

curl -s -X POST https://app.quanticdata.io/api/v1/agent/auth/claim \
  -H "Content-Type: application/json" \
  -d '{"email":"[email protected]","code":"482913"}'

{
  "credential_type": "api_key",
  "api_key": "qd_live_0123…",
  "key_prefix": "qd_live_0123",
  "account_status": "created",
  "usage": { "header": "Authorization: Bearer ", "api_base": "https://api.quanticdata.io/v1" },
  "docs": "https://quanticdata.io/docs/",
  "note": "This key is shown once and is not sent by email. …"
}

import os

def claim(email, code):
    r = requests.post(f"{APP}/agent/auth/claim",
                      json={"email": email, "code": code.replace(" ", "")}, timeout=30)
    body = r.json()
    if r.status_code == 400 and body.get("error") == "invalid_code":
        raise ValueError(f'wrong code, {body["attempts_remaining"]} tries left')
    if r.status_code != 200:
        raise SystemExit(f'{body["error"]}: {body["error_description"]}')
    return body["api_key"], body["account_status"]

key, status = claim("[email protected]", input("Code from the email: "))
os.environ["QUANTICDATA_API_KEY"] = key          # keep it here, never print it
print("account", status)                         # created | existing

async function claim(email, code) {
  const res = await fetch(`${APP}/agent/auth/claim`, {
    method: "POST",
    headers: { "Content-Type": "application/json" },
    body: JSON.stringify({ email, code: code.replace(/\s|-/g, "") }),
  });
  const body = await res.json();
  if (!res.ok) throw new Error(`${body.error}: ${body.error_description}`);
  process.env.QUANTICDATA_API_KEY = body.api_key;   // shown once: store it, never log it
  return body.account_status;                        // "created" | "existing"
}