# auth.md

CommonRig has no registration, no accounts and no agent identity flow. Nothing to claim, nothing to exchange.

- Buy the kit as an agent: GET https://commonrig.com/v1/buy/x402 (x402 USDC); a human buys at https://commonrig.com/checkout.
- The licence key in the receipt is the only credential. Send it as Authorization: Bearer <key> to https://commonrig.com/v1/doctor/check and https://commonrig.com/v1/updates.
- Everything else is public: https://commonrig.com/llms.txt, https://commonrig.com/openapi.json, MCP at https://commonrig.com/mcp.

Lost the key? Email hello@commonrig.com with the order reference from the receipt.