# SecureLend auth

## When to use

Use this when an agent must call lender tools that ask for a sign-in. Two tools can run once without an account. The rest use OAuth.

## Grant

OAuth 2.0 authorization code with PKCE S256. Clients are pre-registered for ChatGPT and Claude. There is no dynamic client registration.

- Authorization endpoint: https://securelend.ai/oauth/authorize
- Token endpoint: https://securelend.ai/oauth/token
- Protected resource metadata: https://securelend.ai/.well-known/oauth-protected-resource
- Authorization server metadata: https://securelend.ai/.well-known/oauth-authorization-server
- Scope: lender

The access token is a workspace credential. It cannot read another workspace.