M2M auth, agent identity, e-signature
Connected Apps and M2M auth — treat each agent as its own OAuth client, and stand up OAuth-compliant MCP servers
API key issuance, per-key rate limits, and usage analytics for machine-to-machine access
AuthKit, Connect, and MCP auth — OAuth flows, scoped tokens, and bot detection for agent access
Token vault, async user approval, and Cross App Access for agents calling third-party APIs
Cryptographically signed agent requests plus a verified bots directory, so sites allow known agents instead of blocking everything
Identity and access control for agents and MCP servers, including inbound and outbound token exchange
Open-source e-signature you can self-host, with a documented API for sending and tracking documents
E-signature envelopes, templates, and Connect webhooks over a documented REST API
Signature requests, templates, and webhooks over a REST API with a free test mode
Identity-layer protocol (XAA) giving enterprises visibility and policy control over which apps an agent may reach
Same query as JSON: /api/v1/services?category=identifyAdd to Claude Code:claude mcp add botfriendly …