Uploaded May 2026 | Updated September 2026, 1 day ago
Madison wanted to share her Svelte personal site with friends, but localhost wasn't going to cut it. Instead of stopping to create a Cloudflare account, generate an API key, and paste it back into her terminal, she let the agent do it — with her identity, not a stolen credential.
0:00 Intro — agentic registration with AuthKit
1:07 Hit the localhost wall
1:45 Register for Cloudflare in one prompt
3:10 Spin up a Firecrawl account the same way
5:18 Decode the ID-JAG token
6:14 Deploy the redesigned site
This is a live demo of agentic registration: an agent signing up for third-party services on behalf of an authenticated user, without breaking the agent context. The mechanism is an ID-JAG — an Identity Assertion JWT Authorization Grant — issued by an identity provider (here, Acme via WorkOS AuthKit) and trusted by the service being signed up for (here, Cloudflare and Firecrawl). The JWT carries the user's verified email, the issuer, and the audience. Cloudflare reads that, trusts the issuer, and returns a real API token and account ID — all inside the same prompt. Madison walks through the full flow: discovery via an `/AuthMD` file at the provider, the token exchange, the API key landing in the environment, and the agent finishing the job by scraping design references with Firecrawl and shipping the site with Wrangler. Part of the AuthKit series on identity for agents.
Madison wanted to share her Svelte personal site with friends, but localhost wasn't going to cut it. Instead of stopping to create a Cloudflare account, generate an API key, and paste it back into her terminal, she let the agent do it — with her identity, not a stolen credential.
0:00 Intro — agentic registration with AuthKit
1:07 Hit the localhost wall
1:45 Register for Cloudflare in one prompt
3:10 Spin up a Firecrawl account the same way
5:18 Decode the ID-JAG token
6:14 Deploy the redesigned site
This is a live demo of agentic registration: an agent signing up for third-party services on behalf of an authenticated user, without breaking the agent context. The mechanism is an ID-JAG — an Identity Assertion JWT Authorization Grant — issued by an identity provider (here, Acme via WorkOS AuthKit) and trusted by the service being signed up for (here, Cloudflare and Firecrawl). The JWT carries the user's verified email, the issuer, and the audience. Cloudflare reads that, trusts the issuer, and returns a real API token and account ID — all inside the same prompt. Madison walks through the full flow: discovery via an `/AuthMD` file at the provider, the token exchange, the API key landing in the environment, and the agent finishing the job by scraping design references with Firecrawl and shipping the site with Wrangler. Part of the AuthKit series on identity for agents.
