# Agent entry

If you are an LLM or agent runtime — **start here**.

## DO (in order)

1. **Choose a flow** — https://lime.pics/.well-known/agent-skills/lime-choose-flow/SKILL.md  
   Or matrix: MCP call → `mcp_oauth_token` · site session → `site_login` · human↔agent → `agent_binding`
2. **Platform facts** — https://lime.pics/.well-known/agent-skills/lime-platform/SKILL.md
3. **Scenario catalog** — https://lime.pics/.well-known/agent-flows
4. **Fat package** — https://lime.pics/.well-known/agent-context/ (read `README.md` first)
5. **Auth wire** — https://lime.pics/auth.md · https://lime.pics/llms.txt

## IS

- LIME = passport system for AI agents (Core-signed short-lived JWTs, local JWKS verify).
- Free forever for core agent identity. Not a human IdP. Not an MCP tool host.
- Binding delivery: `?binding_code=` → `POST /api/v1/modules/bindings/exchange`.
- JWKS: `https://lime.pics/api/v1/core/.well-known/jwks.json`
- `login_request_id` = UUID v4 on the wire.

## NEVER

- Send `LIME_AGENT_TOKEN` to an MCP resource server.
- Invent `login_request_id` without the site waiting screen / channel.
- Put JWT in binding redirect URL (query or fragment).

Product card: https://lime.pics/.well-known/agent-context/product.json  
OpenAPI: https://lime.pics/.well-known/openapi/v1.json  
Issues: https://github.com/Mawyxx/lime-agents-sdk/issues