Documentation

Complete documentation for the Agent Authorization Profile. From getting started guides to deep technical specifications.

Quick Access

Get up and running with AAP in minutes. Learn the basics and create your first AAP token.

Full technical specification with formal schemas, semantics, and validation rules.

Working Authorization Server and Resource Server implementations in Python.

Formal JSON Schema definitions for AAP token validation and interoperability testing.

80+ test cases covering all specification sections, constraints, and edge cases.

Step-by-step guide for migrating from OAuth Scopes to AAP Capabilities.

Kubernetes, Docker, and cloud provider deployment examples and best practices.

Frequently asked questions about AAP, security, compliance, and implementation.

Comprehensive threat analysis with 15 attack scenarios and mitigations.

Cryptographic recommendations, proof-of-possession, and security profiles.

Join the AAP community, contribute to the specification, or get help with implementation.