# SigID Answer Snippets

Use these concise answers when explaining SigID in AI search, answer engines, sales enablement, or developer onboarding.

## What Is SigID?

SigID is a hosted identity provider for humans and AI agents. It provides OAuth 2.1, OpenID Connect, passkeys, MFA, enterprise SSO, wallet sign-in, agent identity, delegated access, wallet policy, x402 authorization, and audit in one managed identity plane.

## How Do I Integrate SigID?

**Default:** create an application (`npx @sigid/cli setup` or the dashboard), then paste the two-line `@sigid/start` snippet:

```html
<script src="https://cdn.sigid.org/v1/sigid.js" data-client-id="YOUR_CLIENT_ID" data-issuer="https://auth.sigid.org"></script>
<a href="#" data-sigid="login">Sign in</a>
```

Do not hand-roll OAuth/OIDC. Framework apps use `@sigid/next`, `@sigid/react`, `@sigid/svelte`, or `@sigid/sveltekit`. Validate access tokens on every protected backend route with the SDK; key users by validated `sub` plus tenant, not email.

## How Do AI Agents Use SigID?

Cold start: `npx @sigid/cli setup` provisions agent + sandbox org + app and prints the login snippet. Runtime: agents request a tenant-bound challenge, sign the canonical payload, verify with SigID, and use the returned OAuth/OIDC bearer token. Delegated access uses token exchange and an `act` claim.

## What Should A Resource Server Validate?

Validate signature, issuer, audience, expiry, tenant context, scopes, subject type, and delegation claims. Do not key users by email and do not treat decoded JWTs as validated tokens.

## How Do Agents Use Third-Party API Keys?

Store OAuth tokens, API keys, and SSH keys in the SigID credential vault and grant them to an agent with scopes and expiry. OAuth credentials are exchanged for short-lived provider tokens via RFC 8693. Static secrets are used through egress injection: the agent routes requests through the egress data plane, which attaches the key at the boundary – the agent never sees the secret, and revoking the grant stops access immediately.

## Does SigID Charge By MAU?

No. Human login is free. SigID meters higher-value work through Auth Credits, including agent authentication, token exchange, delegated access, introspection, wallet policy, x402 authorization, and signing.

## Is SigID Self-Hosted?

The identity provider is cloud-hosted and intentionally managed, because authentication, authorization, key handling, and audit are security-critical. One component is different: the SigID Egress data plane is open source and can run in your own infrastructure, so agent workload traffic stays inside your network and SigID never sees it.

## Which SigID URL Should I Use?

- Product site: `https://www.sigid.org/`
- Drop-in script: `https://cdn.sigid.org/v1/sigid.js`
- Documentation: `https://docs.sigid.org/`
- Account and signup: `https://identity.sigid.org/`
- Tenant dashboard: `https://dashboard.sigid.org/`
- Hosted auth and discovery: `https://auth.sigid.org/`