CodingDocumented overviewLast checked Sep 29, 2026

AgentID: Pricing, Features & Best Use Cases

OpenID Connect identity provider from AgentMail that lets AI agents sign in to apps with their own email-based identity.

Who AgentID fits

Use AgentID if you build an app and want AI agents to sign in with their own email-based identity through standard OpenID Connect instead of borrowing a human's account. Based on the vendor's documentation, not on a hands-on test.

Best for: Developers adding agent login to their apps

Also a good fit for

  • Teams building autonomous agents that need their own accounts
  • Auth platform users on Clerk, Auth0 or Supabase

Consider another tool if requires an AgentMail account for the agent identity

Or if

  • Owner scopes are not available to open (unregistered) clients
  • No pricing page; agent inboxes are sold through AgentMail, not shown on agentid.com

AgentID pricing and usage limits

Prices checked Sep 29, 2026 on the official US pricing page. Prices and limits change often.

Free access and trial conditions

Integration is free for app providers per the official FAQ (seed research).

AgentID does not publish a plan table we could verify. See official pricing ↗

Usage caps, credits and extra costs

Agent inboxes are sold through AgentMail.

What is AgentID, and how does it work?

AgentID is an identity provider built by AgentMail that gives an AI agent its own email address and a 'Sign in with AgentID' login, so the agent can authenticate to apps without borrowing its owner's account. The app never receives a reusable password or key; each sign-in uses a one-time signature that AgentID verifies, and a revoked agent key stops working immediately. For developers, AgentID is a standard OpenID Connect provider. A CLI (npx @agentmail/agentid-cli init) registers AgentID and configures existing auth stacks such as Clerk, Auth0, Supabase, Better Auth or Auth.js. Docs cover endpoints, scopes (openid, email, profile, owner_profile, owner_email), ES256 token verification via JWKS, and dynamic client registration.

AgentID homepage — screenshot of the coding AI tool, Oct 1, 2026
AgentID's official site: how the product presents itself. agentid.com, captured Oct 1, 2026

What you provide and what you get back

How AgentID works: what you provide, where it runs and what you get backYOU PROVIDEYour inputAgent email identity from AgentMa…OIDC configuration of your existi…Scopes requested by your appCODINGAgentIDWeb, APIfree tier, paid price not publish…free tier availableaccount requiredchecked Sep 29, 2026YOU GET BACKThe resultVerified ES256 id_token and acces…Identity claims (sub, email, name…One-time signature sign-insinput → AgentID → output · from the vendor's own pages, no hands-on test unless stated
What you give AgentID and what comes back, from its documentation

You provide

  • Agent email identity from AgentMail
  • OIDC configuration of your existing auth provider
  • Scopes requested by your app

You get back

  • Verified ES256 id_token and access_token
  • Identity claims (sub, email, name, owner claims)
  • One-time signature sign-ins

Where you can use it

Platforms
Web, API
Account
Required
Protocol
OpenID Connect, Authorization Code with PKCE
Token signing
ES256, JWKS
Scopes
openid, email, profile, owner_profile, owner_email
CLI
@agentmail/agentid-cli init/doctor

Best use cases for AgentID

Scenarios are worked out by our editors from the documentation; the actual result depends on your input and plan.

Letting an AI agent sign in to a SaaS app under its own identity

Who
SaaS developers
You provide
An app on Clerk, Auth0, Supabase, Better Auth or Auth.js
Expected result
A Sign in with AgentID button agents can use to open their own accounts
Plan needed
Free for providers per FAQ
Limitation
App needs an OIDC-capable auth stack source (opens in a new tab)

Adding agent sign-in to an app that already uses Clerk, Auth0 or Supabase

Who
AI agent builders
You provide
An agent with an AgentMail inbox
Expected result
The agent signs in on its own without using its owner's login
Plan needed
AgentMail inbox required
Limitation
Inbox pricing is on AgentMail, not agentid.com source (opens in a new tab)

Verifying which human owns an agent via owner scopes

Who
Apps needing accountability
You provide
owner_profile and owner_email scopes
Expected result
Knowing which human owns the agent
Plan needed
Registered clients only
Limitation
Open clients cannot request owner scopes source (opens in a new tab)

AgentID features and their limits

AgentID homepage — screenshot of the coding AI tool, Oct 1, 2026
Feature overview on the official site. agentid.com, captured Oct 1, 2026

Agent identity based on a real email address

Gives each agent a real email-address identity that works as its login. Agents keep access separate from their owner.

Access: Needs AgentMail accountLimit: Tied to AgentMail inboxes source (opens in a new tab)

Standard OpenID Connect provider with discovery and JWKS

Acts as a standard OIDC provider with discovery, JWKS, authorize, token, userinfo and dynamic registration endpoints. Plugs into existing stacks by configuration.

Access: DevelopersLimit: Open clients must use PKCE S256 source (opens in a new tab)

CLI that configures Clerk, Auth0, Supabase, Better Auth, Auth.js or custom OIDC

Runs npx @agentmail/agentid-cli init and doctor to configure and verify the provider in your auth service. Cuts integration to a few steps.

Access: DevelopersLimit: Covers listed providers or custom OIDC source (opens in a new tab)

One-time signatures; apps never receive a reusable password or key

Uses one-time signatures so apps never receive a reusable password or key, and a revoked key stops at once. Limits damage from leaks.

Access: AllLimit: Revocation must be done by the agent's owner source (opens in a new tab)

Pros, cons and deal-breakers

Where AgentID is strong

  • Free for app providers per the official FAQ Integration is configuration rather than new code. documented source (opens in a new tab)
  • Works with existing auth providers through configuration rather than custom code A stolen key reaches only one agent's access. documented source (opens in a new tab)
  • Public docs list endpoints, scopes, token claims and lifetimes You can verify tokens with standard libraries. documented source (opens in a new tab)
  • Per-human limits on agent accounts are enforced by the platform documented source (opens in a new tab)

Limitations to check before paying

  • Requires an AgentMail account for the agent identity Agents need an inbox before they can sign in. documented source (opens in a new tab)
  • Owner scopes are not available to open (unregistered) clients Pricing for agent inboxes must be checked separately. documented source (opens in a new tab)
  • No pricing page; agent inboxes are sold through AgentMail, not shown on agentid.com Not suitable for apps without OIDC support. documented source (opens in a new tab)
  • Aimed at developers; requires an existing OIDC-capable auth setup Cannot be tried without developer setup. documented source (opens in a new tab)

How to use AgentID for adding Sign in with AgentID to an app

AgentID documentation — screenshot of the coding AI tool, Oct 1, 2026
AgentID documentation: where the steps below come from. agentid.com, captured Oct 1, 2026

Set up AgentID

  1. Open the app's project root with an existing Clerk, Auth0, Supabase, Better Auth, Auth.js or custom OIDC setup.
  2. Run npx @agentmail/agentid-cli init.
  3. Create an AgentID application in the console and choose your auth provider.
  4. Add the provider and scopes (openid, email, profile) in your auth service.

Example: adding Sign in with AgentID to an app

  1. Run the CLI init from the project root.
  2. Enable the AgentID provider in Clerk SSO settings and match the callback URL.
  3. Turn the provider on and add the button to the login page.
  4. Sign in as an agent with an AgentMail identity.

Review and export the result

  1. Run npx @agentmail/agentid-cli doctor to verify configuration.
  2. Validate a returned token against /v0/jwks.json, checking iss and aud.
  3. Confirm revoking the agent key blocks the next sign-in.
Example prompt suggested by our editors (not a recorded output of the product)
Add AgentID sign-in to this project. Read https://www.agentid.com/llms-full.txt for the integration reference, then run npx @agentmail/agentid-cli init from the project root.

AgentID API

AgentID documentation — screenshot of the coding AI tool, Oct 1, 2026
AgentID documentation (continued). agentid.com, captured Oct 1, 2026

API access and separate billing

AgentID has no public API in its official documentation. OIDC endpoints: authorize, token, userinfo, jwks, register. API documentation ↗

Privacy, data use and commercial rights

Summarized from the vendor's current policies; this is not legal advice and a vendor's badge is not an independent audit.

How your inputs and outputs are handled

AgentMail acts as controller for account and website data and as processor for customer email content.

Commercial use and plan restrictions

Owner scopes need the Provider: Share Owner permission.

Controls for business users

  • Revocable per-agent keys
  • Owner approval for owner scopes

Policies: agentid.com/legal/privacy

Other tools to consider instead of AgentID

"Better suited" is based on documented features and pricing, not on a head-to-head test.

Make: better suited to

n8n: better suited to

Zapier: better suited to

Alternatives
AlternativeWhen to choose itPricingLimitation
Make——
n8n——
Zapier——

Explore AgentID further

If you are looking at AgentID

AgentID user reviews

No user reviews yet.

Used AgentID? Be the first to share your experience.

Write a review

Reviews are checked by a moderator before they appear. Your email is never published. Plain text only.

Your rating (required)

Show what you made or what went wrong. Images are published only if the review is approved; location data is removed.

    AgentID FAQ

    Does the app get my agent's password or key?

    No. Each sign-in uses a one-time signature AgentID verifies, so the app gets no reusable secret. source (opens in a new tab)

    Which auth providers does the CLI configure?

    Clerk, Auth0, Supabase, Better Auth and Auth.js, or a custom OIDC setup. source (opens in a new tab)

    How are tokens verified?

    They are ES256; validate against https://auth.agentid.com/v0/jwks.json and check iss and aud. source (opens in a new tab)

    Can an app learn who owns an agent?

    Only through the owner_profile and owner_email scopes, which open clients cannot request and which need owner permission. source (opens in a new tab)

    What happens when I revoke an agent?

    The agent's key stops signing in immediately. source (opens in a new tab)

    Sources and review methodology

    Official sources and verification dates

    Not verified: Pricing; Token lifetimes; Data retention periods.

    How we documented and maintain this page

    Every fact about AgentID above comes from the 3 official pages listed here, last compared on Sep 29, 2026; we have not run AgentID ourselves, so it has no editorial score. How we check and re-check pages.

    Article updated Oct 10, 2026; prices checked Sep 29, 2026. Outbound links to vendors are plain links; we do not earn commissions. How we review · Report an error