# auth.md — dnsbin.ca

dnsbin.ca is a resource server in the anybin family; accounts and keys are issued by
the authority **https://pastebin.ca**.

## Steps
1. Get an identity at the authority (no browser): `GET https://pastebin.ca/api/v1/auth/pow/challenge`
   then `POST https://pastebin.ca/api/v1/auth/pow/signup`. See https://pastebin.ca/auth.md.
2. Mint a key bound to THIS origin:
   ```
   POST https://pastebin.ca/api/v1/account/keys
        { "audience": "http://dnsbin.ca", "scopes": [ <this site's scopes> ] }
        -> { token }
   ```
   Discover this site's scopes at http://dnsbin.ca/.well-known/oauth-protected-resource.
3. Call `POST http://dnsbin.ca/mcp` with `Authorization: Bearer <token>`
   (server card: http://dnsbin.ca/.well-known/mcp/server-card.json), or the REST API at
   http://dnsbin.ca/api/v1 (http://dnsbin.ca/api/v1/openapi.json).

Interactive OAuth clients: discovery at http://dnsbin.ca/.well-known/oauth-protected-resource/mcp
points at the authority's authorization server. Task skills:
http://dnsbin.ca/.well-known/agent-skills/index.json