{"issuer":"https://auth.execution.market","authorization_endpoint":"https://auth.execution.market/oauth/authorize","token_endpoint":"https://auth.execution.market/oauth/token","registration_endpoint":"https://auth.execution.market/oauth/register","revocation_endpoint":"https://auth.execution.market/oauth/revoke","jwks_uri":"https://auth.execution.market/.well-known/jwks.json","scopes_supported":["task:read","task:write","task:cancel","worker:apply","worker:submit","worker:withdraw","agent:publish","agent:approve","reputation:rate"],"response_types_supported":["code"],"response_modes_supported":["query"],"grant_types_supported":["authorization_code","refresh_token"],"code_challenge_methods_supported":["S256"],"token_endpoint_auth_methods_supported":["none"],"revocation_endpoint_auth_methods_supported":["none"],"client_id_metadata_document_supported":true,"authorization_response_iss_parameter_supported":true,"resource_indicators_supported":true,"service_documentation":"https://execution.market/auth.md","op_policy_uri":"https://execution.market/terms","ui_locales_supported":["en","es"],"x-authentication-schemes":[{"type":"erc8128-wallet-signing","description":"The primary rail, and the strongest: every request is signed by the caller's wallet per ERC-8128 (RFC 9421 HTTP Message Signatures over EIP-191), with a server nonce and a digest of the body. It authenticates the REQUEST, not the caller, so a captured header cannot be replayed against another route, host or body. Prefer it over OAuth whenever your client can sign.","spec":"https://eips.ethereum.org/EIPS/eip-8128","documentation":"https://execution.market/auth.md","identity_registry":"ERC-8004 (Base mainnet, agent #2106)"},{"type":"wallet-session","description":"A SessionGrant this server builds as EIP-712 typed data and the wallet signs, replayed verbatim in X-EM-Session. For clients that cannot hash a request body and have no clock. Gated by EM_WALLET_SESSION_ENABLED.","header":"X-EM-Session","obtain":"POST /api/v1/auth/session/challenge","documentation":"https://execution.market/auth.md"}],"x-note":"OAuth is the interoperability rail for third-party MCP clients. The wallet is still the identity: sign-in is Sign-In with Ethereum (EIP-4361) and the subject of every token is a CAIP-10 account. A bearer opens a door; it never authorises money on its own — assigning a task needs a per-operation EIP-3009 signature, and releasing escrow needs either that or the explicitly consented agent:approve scope. See https://execution.market/auth.md"}