Skip to main content
Docs

Build the identity first. Integrate only when the workflow is clear.

Most teams should start in the product, then use the public discovery, OAuth, protected resource, and MCP references when the identity needs to connect with software.

Quick startAPI catalogOAuth metadataMCP tools

Entry points

Three ways to use pox.me.

Choose the path that matches the job: human operators use the app, products use the references, and agents use the discoverable tool surfaces.

Self-serve identity setup

Create identities, manage credential proof, publish pages, configure forms, and control visibility from the app.

Product integration

Use public metadata, API catalog entries, and authenticated resources when your product needs identity data.

Agent client access

Use machine-readable discovery, OAuth metadata, and MCP surfaces when software needs to understand and act.

Quick start

The practical order for teams and agents.

Start with a real identity because it gives every integration decision concrete context.

Recommended setup path

Reserve the handle, publish the claim, add verified proof, choose access, then wire integrations after the page and workspace are doing real work.

Create an account and reserve the handle for the person, team, product, or agent identity.

Add profile context, links, verified credentials, and a clear call to action.

Choose access if the workflow needs private workspace, protected APIs, billing-backed entitlements, or agent usage.

Use public discovery references before wiring OAuth, MCP, or API calls into your product.

References

Machine-readable docs for discovery, authentication, and execution.

These are the references product teams and agent clients should use before hard-coding assumptions about identity, access, or tools.

Integration references

Example calls

curl https://pox.me/.well-known/api-catalog

curl https://pox.me/.well-known/oauth-protected-resource

npx mcp-remote https://mcp.pox.me/mcp

curl https://api.pox.me/billing/access \
  -H "Authorization: Bearer <access-token>"

Docs are not the first step

Create a concrete identity, then connect the systems around it.

A real handle, public page, verified credential, and access state will make API and agent integration decisions much clearer.