[{"data":1,"prerenderedAt":294},["ShallowReactive",2],{"navigation":3,"\u002Fgetting-started\u002Fquickstart-agent":89,"\u002Fgetting-started\u002Fquickstart-agent-surround":289},[4,40,63,76],{"title":5,"path":6,"stem":7,"children":8,"icon":39},"Getting Started","\u002Fgetting-started","1.getting-started\u002F1.index",[9,11,15,19,23,27,31,35],{"title":10,"path":6,"stem":7},"Introduction",{"title":12,"path":13,"stem":14},"Quick Start: Service Provider","\u002Fgetting-started\u002Fquickstart-sp","1.getting-started\u002F2.quickstart-sp",{"title":16,"path":17,"stem":18},"Quick Start: Identity Provider","\u002Fgetting-started\u002Fquickstart-idp","1.getting-started\u002F3.quickstart-idp",{"title":20,"path":21,"stem":22},"Quick Start: Agent","\u002Fgetting-started\u002Fquickstart-agent","1.getting-started\u002F4.quickstart-agent",{"title":24,"path":25,"stem":26},"Quick Start","\u002Fgetting-started\u002Finstallation","1.getting-started\u002F5.installation",{"title":28,"path":29,"stem":30},"How It Works","\u002Fgetting-started\u002Fhow-it-works","1.getting-started\u002F6.how-it-works",{"title":32,"path":33,"stem":34},"For Service Providers","\u002Fgetting-started\u002Ffor-service-providers","1.getting-started\u002F7.for-service-providers",{"title":36,"path":37,"stem":38},"CLI (apes & ape-shell)","\u002Fgetting-started\u002Fcli","1.getting-started\u002F8.cli",false,{"title":41,"path":42,"stem":43,"children":44,"icon":39},"Ecosystem","\u002Fecosystem","2.ecosystem\u002F1.index",[45,47,51,55,59],{"title":46,"path":42,"stem":43},"Overview",{"title":48,"path":49,"stem":50},"OpenApe Auth","\u002Fecosystem\u002Fauth","2.ecosystem\u002F2.auth",{"title":52,"path":53,"stem":54},"OpenApe Grants","\u002Fecosystem\u002Fgrants","2.ecosystem\u002F3.grants",{"title":56,"path":57,"stem":58},"nuxt-auth-sp","\u002Fecosystem\u002Fnuxt-auth-sp","2.ecosystem\u002F4.nuxt-auth-sp",{"title":60,"path":61,"stem":62},"escapes","\u002Fecosystem\u002Fescapes","2.ecosystem\u002F5.escapes",{"title":64,"icon":39,"path":65,"stem":66,"children":67,"page":39},"Security","\u002Fsecurity","3.security",[68,72],{"title":69,"path":70,"stem":71},"Compliance","\u002Fsecurity\u002Fcompliance","3.security\u002F1.compliance",{"title":73,"path":74,"stem":75},"Threat Model","\u002Fsecurity\u002Fthreat-model","3.security\u002F2.threat-model",{"title":77,"icon":39,"path":78,"stem":79,"children":80,"page":39},"Guides","\u002Fguides","4.guides",[81,85],{"title":82,"path":83,"stem":84},"Capabilities & Grants","\u002Fguides\u002Fcapabilities","4.guides\u002F1.capabilities",{"title":86,"path":87,"stem":88},"Delegation","\u002Fguides\u002Fdelegation","4.guides\u002F2.delegation",{"id":90,"title":20,"body":91,"description":282,"extension":283,"links":284,"meta":285,"navigation":286,"path":21,"seo":287,"stem":22,"__hash__":288},"docs\u002F1.getting-started\u002F4.quickstart-agent.md",{"type":92,"value":93,"toc":271},"minimark",[94,99,104,122,126,152,163,166,170,184,187,191,218,225,229,232,237,255,259,267],[95,96,98],"h1",{"id":97},"enroll-an-ai-agent","Enroll an AI Agent",[100,101,103],"h2",{"id":102},"prerequisites","Prerequisites",[105,106,107,111],"ul",{},[108,109,110],"li",{},"Node.js 22+",[108,112,113,114,121],{},"An account on an OpenApe IdP (e.g. ",[115,116,120],"a",{"href":117,"rel":118},"https:\u002F\u002Fid.openape.ai",[119],"nofollow","id.openape.ai",")",[100,123,125],{"id":124},"_1-enroll","1. Enroll",[127,128,133],"pre",{"className":129,"code":130,"language":131,"meta":132,"style":132},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","npx @openape\u002Fapes enroll\n","bash","",[134,135,136],"code",{"__ignoreMap":132},[137,138,141,145,149],"span",{"class":139,"line":140},"line",1,[137,142,144],{"class":143},"sBMFI","npx",[137,146,148],{"class":147},"sfazB"," @openape\u002Fapes",[137,150,151],{"class":147}," enroll\n",[153,154,155,156,158,159,162],"p",{},"The wizard asks for the IdP URL (default: ",[134,157,120],{},"), your agent's name, and which Ed25519 key to use (default: ",[134,160,161],{},"~\u002F.ssh\u002Fid_ed25519",").",[153,164,165],{},"It opens a browser where you confirm the enrollment. The CLI waits until confirmed, then verifies the agent can authenticate.",[100,167,169],{"id":168},"_2-verify","2. Verify",[127,171,173],{"className":129,"code":172,"language":131,"meta":132,"style":132},"npx @openape\u002Fapes whoami\n",[134,174,175],{"__ignoreMap":132},[137,176,177,179,181],{"class":139,"line":140},[137,178,144],{"class":143},[137,180,148],{"class":147},[137,182,183],{"class":147}," whoami\n",[153,185,186],{},"You should see your agent's email and IdP.",[100,188,190],{"id":189},"_3-build","3. Build",[127,192,194],{"className":129,"code":193,"language":131,"meta":132,"style":132},"# Optional: scaffold a starter project\nnpx @openape\u002Fapes init --sp my-agent-app\n",[134,195,196,202],{"__ignoreMap":132},[137,197,198],{"class":139,"line":140},[137,199,201],{"class":200},"sHwdD","# Optional: scaffold a starter project\n",[137,203,205,207,209,212,215],{"class":139,"line":204},2,[137,206,144],{"class":143},[137,208,148],{"class":147},[137,210,211],{"class":147}," init",[137,213,214],{"class":147}," --sp",[137,216,217],{"class":147}," my-agent-app\n",[153,219,220,221,224],{},"Or use the agent programmatically — the config is stored in ",[134,222,223],{},"~\u002F.config\u002Fapes\u002F",".",[100,226,228],{"id":227},"done","Done",[153,230,231],{},"Your agent has a DDISA identity and can authenticate with Ed25519 challenge-response. It has zero permissions by default — every action requires a human-approved grant.",[233,234,236],"h3",{"id":235},"whats-next","What's Next?",[105,238,239,245,250],{},[108,240,241,244],{},[115,242,243],{"href":83},"Grant system"," — how agents request and receive permissions",[108,246,247,249],{},[115,248,86],{"href":87}," — act on behalf of another user",[108,251,252,254],{},[115,253,60],{"href":61}," — privilege escalation with grant verification",[233,256,258],{"id":257},"agent-lifecycle","Agent Lifecycle",[127,260,265],{"className":261,"code":263,"language":264},[262],"language-text","Enroll  →  apes enroll (one-time, registers public key at IdP)\nLogin   →  Ed25519 challenge-response (automatic, per-session)\nRequest →  Ask for permission (grant)\nApprove →  Human approves in browser or CLI\nExecute →  Use grant token for authorized action\n","text",[134,266,263],{"__ignoreMap":132},[268,269,270],"style",{},"html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}",{"title":132,"searchDepth":140,"depth":204,"links":272},[273,274,275,276,277],{"id":102,"depth":204,"text":103},{"id":124,"depth":204,"text":125},{"id":168,"depth":204,"text":169},{"id":189,"depth":204,"text":190},{"id":227,"depth":204,"text":228,"children":278},[279,281],{"id":235,"depth":280,"text":236},3,{"id":257,"depth":280,"text":258},"Enroll an AI agent with DDISA identity in 3 minutes.","md",null,{},true,{"title":20,"description":282},"6cifMxRD7uhZxEX2bTUcIUtMq9EWXOnPjjEG2kVO8LA",[290,292],{"title":16,"path":17,"stem":18,"description":291,"children":-1},"Run your own DDISA Identity Provider in 3 minutes.",{"title":24,"path":25,"stem":26,"description":293,"children":-1},"Get OpenApe running in minutes.",1776885317056]