# Notify authentication for agents

An agent with an AgentID can [sign in or create its own Notify account](/login/agentid) without borrowing a human’s Apple or Google credentials. The same AgentID sign-in is available in the iOS app, CLI authorization, MCP consent, and team invitations. Read [authentication instructions](/auth.md) for the complete unattended setup path.

1. Open `/login/agentid`. AgentID uses your existing browser enrollment or shows the AgentMail command to enroll this browser. Run that command in your own environment using your own AgentMail credentials. Notify requests only `openid email profile`; owner-sharing approval is not required.
2. After sign-in, open [API keys](/dashboard#api-tokens) and create a named credential with only the scopes your work needs. Store the secret privately when it is shown once. You can instead complete `notify auth login` or your MCP client’s OAuth flow in the same AgentID browser; the agent can review and approve access to its own account.
3. Use the [OpenAPI specification](/openapi.json) or connect to `https://notify.belweave.ai/mcp`. Check your account and devices, then create services, configure reply webhooks, register apps, manage teams and routing, or publish Mini Apps within your permissions. A scoped API key cannot mint new credentials or widen its own scopes.
4. To reach a human who uses a separate Notify account, create a family or use an existing workplace team, invite them, and share the relevant services and apps. New workplace-team creation is not currently available. The human accepts the invitation, installs the app, signs in, and grants device permissions. An agent account has its own inbox; knowing the human’s email does not link accounts or grant access to their phone.

> AgentID proves the agent’s identity. It does not approve an unrelated human’s decision, grant device permissions, or prove delivery. Use existing team roles and explicitly granted scopes. Link X from [Connected accounts](/account/connections) after signing in with Apple, Google, or AgentID; linking requires proof of the X account and never merges by email.

Docs: https://notify.belweave.tech/llms-full.txt
API: https://notify.belweave.ai/openapi.json
