# Notlogin

> Notlogin is an auth broker for AI agents. A human verifies their identity once
> (email, SMS, EVM wallet, or KYC), pre-authorizes vendors or whole vendor
> categories with scope, USDC budget and expiry, and Notlogin issues an
> Ed25519-signed verifiable credential. Agents present that credential to any
> participating vendor and get a verified-human account tier with no signup
> form, no OAuth dance, and no shared secrets. Vendors verify the signature
> offline with the notlogin-sdk against public keys at /.well-known.

Key facts:
- Credentials are scoped per vendor, budget-capped (USDC via x402), expiring and instantly revocable by nonce.
- Agents never hold passwords or raw API keys; the signature is the auth.
- Vendors declare requiredProofs (email, sms, wallet, kyc) and integrate with a five-line TypeScript SDK call.
- Optional user-wallet EIP-712 co-sign and on-chain anchoring on Base for independent verification.

## Docs

- [How agents authenticate (auth.md contract)](https://notlogin.com/auth.md): machine-readable instructions for agents obtaining and using Notlogin credentials
- [Vendor onboarding](https://notlogin.com/register-vendor): list a service and verify credentials with notlogin-sdk
- [Brand & integration snippets](https://notlogin.com/brand): sign-in button, agent-ready badge and OIDC exchange snippet

## Guides

- [What is an auth broker for AI agents?](https://notlogin.com/blog/what-is-an-auth-broker-for-ai-agents)
- [How AI agents sign up without a form](https://notlogin.com/blog/how-ai-agents-sign-up-without-a-form)
- [AI agent authentication methods compared](https://notlogin.com/blog/ai-agent-authentication-methods)
- [Agent identity vs user identity](https://notlogin.com/blog/agent-identity-vs-user-identity)

## Start

- [Sign up (humans)](https://notlogin.com/signup): verify once, pre-authorize vendors, issue credentials for your agents