# Agent ID authorization

This guide separates work an Agent may prepare from decisions that require the website owner.

## Agent-safe work

- Read the public Agent Card: https://xagent.id/.well-known/agent-card.json
- Read the installation contract: https://xagent.id/api/site_agents/install_guide
- Inspect public website files and prepare a local dry-run plan.
- Report evidence, missing signals, and proposed changes without changing the website.

## Human authorization required

- The website owner must approve domain ownership verification.
- The website owner must explicitly approve file writes, deployment, secret creation, or any change to production.
- An Agent must not make unattended ownership claims or represent an unverified domain.

## Credential boundary

Site Agent Keys and signing keys belong in the customer's backend, secret manager, CMS connector, or website-Agent runtime. Never put them in browser JavaScript, public files, source control, logs, prompts, or reports.

Public inspection does not grant Agent ID permission to modify a customer website. Every proposed write remains subject to customer policy and explicit approval.