Self-serve identity setup
Create identities, manage credential proof, publish pages, configure forms, and control visibility from the app.
Most teams should start in the product, then use the public discovery, OAuth, protected resource, and MCP references when the identity needs to connect with software.
Entry points
Choose the path that matches the job: human operators use the app, products use the references, and agents use the discoverable tool surfaces.
Create identities, manage credential proof, publish pages, configure forms, and control visibility from the app.
Use public metadata, API catalog entries, and authenticated resources when your product needs identity data.
Use machine-readable discovery, OAuth metadata, and MCP surfaces when software needs to understand and act.
Quick start
Start with a real identity because it gives every integration decision concrete context.
Reserve the handle, publish the claim, add verified proof, choose access, then wire integrations after the page and workspace are doing real work.
Create an account and reserve the handle for the person, team, product, or agent identity.
Add profile context, links, verified credentials, and a clear call to action.
Choose access if the workflow needs private workspace, protected APIs, billing-backed entitlements, or agent usage.
Use public discovery references before wiring OAuth, MCP, or API calls into your product.
References
These are the references product teams and agent clients should use before hard-coding assumptions about identity, access, or tools.
API catalog
https://pox.me/.well-known/api-catalog
Protected resource metadata
https://pox.me/.well-known/oauth-protected-resource
OpenID configuration
https://auth.pox.me/oidc/.well-known/openid-configuration
Identity MCP
https://mcp.pox.me/mcp
Commerce MCP
https://api.pox.me/agentic/mcp
LLMs overview
https://pox.me/llms.txt
curl https://pox.me/.well-known/api-catalog
curl https://pox.me/.well-known/oauth-protected-resource
npx mcp-remote https://mcp.pox.me/mcp
curl https://api.pox.me/billing/access \
-H "Authorization: Bearer <access-token>"Docs are not the first step
A real handle, public page, verified credential, and access state will make API and agent integration decisions much clearer.