# auth.md - PilotJob Agent Registration

PilotJob is available at https://www.pilotjob.ch. Human users create accounts through the web app and can optionally connect Gmail through Google OAuth consent.

## Registration

- User sign-up: https://www.pilotjob.ch/auth
- Agent registration endpoint: https://www.pilotjob.ch/agent/auth
- Agent claim endpoint: https://www.pilotjob.ch/agent/auth/claim
- Agent revocation endpoint: https://www.pilotjob.ch/agent/auth/revoke
- Pricing: https://www.pilotjob.ch/pricing
- Privacy policy: https://www.pilotjob.ch/privacy
- Terms: https://www.pilotjob.ch/terms

## Supported Agent Flow

PilotJob currently supports user-mediated registration. An AI agent may guide a user to create an account, upload application documents, connect Gmail, and configure application preferences inside the PilotJob web app.

PilotJob does not issue autonomous third-party credentials for sending email on behalf of a user. Gmail sending requires explicit Google OAuth consent by the user.

## Supported Agent Identity Methods

- identity_assertion: verified_email
- credential type after user-mediated registration: access_token
- bearer method: Authorization header

## agent_auth

```json
{
  "skill": "https://www.pilotjob.ch/auth.md",
  "register_uri": "https://www.pilotjob.ch/agent/auth",
  "claim_uri": "https://www.pilotjob.ch/agent/auth/claim",
  "revocation_uri": "https://www.pilotjob.ch/agent/auth/revoke",
  "identity_types_supported": [
    "identity_assertion"
  ],
  "identity_assertion": {
    "assertion_types_supported": [
      "verified_email",
      "urn:ietf:params:oauth:token-type:id-jag"
    ],
    "credential_types_supported": [
      "access_token"
    ]
  },
  "events_supported": [
    "https://schemas.workos.com/events/agent/auth/identity/assertion/revoked"
  ]
}
```

## OAuth And Scopes

For user-facing Gmail features, PilotJob requests the minimum Google scopes required by the active product flow. Gmail data is used only for visible user-facing functionality: sending job applications and detecting relevant replies to applications sent through PilotJob.

PilotJob does not use Gmail data for advertising, does not sell Gmail data, and does not use Gmail data to train general AI models.

## Revocation

Users can revoke Google access at https://myaccount.google.com/permissions and request data deletion through https://www.pilotjob.ch/privacy.