{"issuer":"https://mailbox.bot","resource":"https://mailbox.bot/api","authorization_servers":["https://mailbox.bot"],"scopes_supported":["postal","offline_access","agent.inbox.read","agent.inbox.report","agent.inbox.propose","agent.read","agent.write","mailbox.read","mailbox.write","inbound.item.read","inbound.item.action","inbound.item.scan.read","inbound.read","message.send","webhook.read","webhook.manage","billing.read","mail.send","document.read"],"bearer_methods_supported":["header"],"agent_auth":{"skill":"https://mailbox.bot/auth.md","register_uri":"https://mailbox.bot/agent/auth","claim_uri":"https://mailbox.bot/agent/auth/claim","claim_complete_uri":"https://mailbox.bot/agent/auth/claim/complete","revocation_uri":null,"waitlist_uri":"https://mailbox.bot/api/v1/mailing-address-requests","signup_uri":"https://mailbox.bot/api/v1/signup","current_flow":"user_claimed_email_required","identity_types_supported":["identity_assertion"],"anonymous":{"enabled":false,"reason":"Anonymous registration is not enabled because mailbox.bot can place physical mail orders and spend prepaid operator credits."},"identity_assertion":{"assertion_types_supported":["verified_email"],"credential_types_supported":["api_key"],"current_mode":"user_claimed_email_required","credential_issuance":"No live credential is issued by agent auth. OTP confirms email ownership; the human operator must complete onboarding, payment, and agent credential approval before live API use."},"events_supported":[],"mailbox_bot_safety":{"live_credentials_issued_by_agent_auth":false,"pre_claim_scopes":["agent.read","mailbox.read","inbound.item.read","inbound.read"],"post_claim_scopes":["agent.read","mailbox.read","inbound.item.read","inbound.item.action","inbound.item.scan.read","inbound.read","message.send","mail.send","document.read"],"live_order_requirements":["verified operator email","completed onboarding","prepaid credits or billing setup owned by the human operator","agent-scoped API key with mail.send","active mailbox for the agent","cost cap or human approval policy for higher-risk workflows"],"credit_controls":["sk_agent_test_ keys never spend credits or trigger physical fulfillment; approved sample handling uses a separately labeled TEST facility lane","live mail supports X-Max-Cost-Cents","agent keys can force human approval for every mailpiece","agent keys can enforce max_daily_pieces","platform daily spend caps reject over-budget submissions before upload or credit debit","agents can read GET /v1/credits with billing.read but cannot initiate Stripe Checkout"]}},"authorization_endpoint":"https://mailbox.bot/oauth/authorize","token_endpoint":"https://mailbox.bot/oauth/token","registration_endpoint":"https://mailbox.bot/oauth/register","revocation_endpoint":"https://mailbox.bot/oauth/revoke","response_types_supported":["code"],"response_modes_supported":["query"],"grant_types_supported":["authorization_code","refresh_token"],"code_challenge_methods_supported":["S256"],"token_endpoint_auth_methods_supported":["none"],"client_id_metadata_document_supported":true,"revocation_endpoint_auth_methods_supported":["none"],"authorization_response_iss_parameter_supported":true}