Authentication for
Autonomous Agents

import { Clawth } from '@clawth/server'

export const clawth = new Clawth({
  apiKey: process.env.CLAWTH_API_KEY,
})

// Note: you can also skip this step by including Clawth's direct
// registration URL in your SKILL.md. Clawth will handle this.

import { clawth } from '@/auth'

// The agent calls your app's endpoint to register itself:
async function registerRequest(data) {
  const result = await clawth.registerAgent(data)
  
  // Clawth automatically generates the optimized instructions for the agent.
  // Just return this.
  return result.instructionsForAgent
  
  // For example, if you decided that agents must be claimed by humans, Clawth
  // will tell the agent to ask its human to visit:
  // https://claim.clawth.dev/very-secret-token
}

import { Clawth } from '@clawth/server'
import { clawth } from '@/auth'

// Once done, the agent calls your app to performs an action that requires auth: 
async function performAction(req) {
  // Get the agent's session.
  const apiKey = Clawth.utils.apiKey.fromExpressRequest(req)
  const res = await clawth.getSession({ apiKey })

  if (res.isError) {
    // Clawth never throws errors. It generates agent error instructions
    // so that the agent can fix the error itself. Just return this.
    return res.instructionsForAgent
  }
  
  // If successful, the agent is authenticated (res.session is not null).
  performAuthenticatedAction(res.session, req.body)
  
  return { success: true }
}