Authentication

ACP auth modules are SDK-managed resources. Beyond create and deploy, the auth manager adds user lifecycle operations so the same surface can provision the auth service and operate the identities inside it.

Pricing

Authentication pricing in Compute Tokens

Auth is billed as a deployed service surface. This is the rate for the hosted auth module itself, separate from the computers or apps that use it.

Auth runtime

0.1 CT / minute

Billed while the auth surface stays deployed.

What auth modules are for

Use auth modules when ACP should own sign-up, sign-in, user creation, and session-facing identity operations for the product surface you are shipping.

Create and deploy the auth surface through client.auth.

Use auth-specific helpers for user creation, sign-up, and sign-in.

Bind auth to a web app or agent runtime when identity should sit inside a larger ACP system.

Auth resource lifecycle in JavaScript

The auth manager inherits the full generic resource lifecycle and then adds auth-specific user methods on top.

Use the resource lifecycle for deployment, runtime inspection, bindings, logs, and file operations.

Keep user-facing auth operations separate from the lower-level resource lifecycle.

Operate the auth resource end to end

Auth user operations in JavaScript

These helpers are specific to the auth manager and are not exposed on generic resource managers.

Use createUser for admin-controlled user creation.

Use signUp and signIn when you want to drive user-facing auth flows from the SDK.

Create users and authenticate them

Auth resource lifecycle in Python

Python exposes the same auth resource lifecycle for backend services and control planes.

Use client.auth for the deployed auth surface itself.

Use the auth-specific helpers separately for user lifecycle operations.

Operate the auth resource end to end

Auth user operations in Python

Python mirrors the same user lifecycle helpers through snake_case methods.

Use list_users for basic user administration.

Use create_user, sign_up, and sign_in for operational auth flows.

Create users and authenticate them