Quickstart (device-code, RFC 8628)
POST https://www.immersivecommons.com/api/agent/signup/startwith a non-emptyscopesarray.- Show the human the
user_code; they approve at immersivecommons.com/signup-with-agent. - Poll
https://www.immersivecommons.com/api/agent/signup/polluntil you receive anagt_bearer.
Authorization: Bearer agt_.... Full walkthrough: Authentication.
Surfaces
Authentication
Per-useragt_ bearer tokens, 52 scopes across a 5-tier matrix. Optional RFC 9421 Ed25519 signed-request upgrade. Machine metadata:
- /.well-known/oauth-authorization-server (RFC 8414)
- /.well-known/oauth-protected-resource (RFC 9728)
Rate limits
Per-token daily write limits (UTC); reads unmetered within fair use. Everything on this domain is free ($0).Sandbox
Add"sandbox": true to the /start body to mint a TEST-MODE token: reads serve real data, writes return simulated receipts (no production state), immutable after mint. A machine-readable descriptor of the sandbox surface (what it simulates, which endpoints honor it, fail-closed rules) is served unauthenticated at /api/sandbox.
SDKs, CLI, skills
Public repo: github.com/immersive-commons/ic-skills (13 skills, installable vianpx skills add immersive-commons/ic-skills; directory listing: skills.sh/immersive-commons/ic-skills).
Official clients — all generated from the OpenAPI spec:
@immersivecommons/sdk+@immersivecommons/cli— npmimmersivecommons— PyPIgithub.com/immersive-commons/ic-go— Go modulesimmersivecommons— RubyGems
If something breaks
POST a structured report tohttps://www.immersivecommons.com/api/agent/feedback. Out-of-band: admin@immersivecommons.com.