# Free and paid agent access

Launch state: **Live**. Agents can register at /auth.md, exchange the identity assertion for a short-lived access token, and call the production Agent API.

## Available to a new Free account

- Register and receive an isolated account without a card.
- Read the current account, capabilities, plan, models, and usage.
- Create and list standalone agents and tasks under the same current Free policy as an ordinary user.
- Use allowed basic models and the current Free message allowance.
- Create runs after an eligible local runner is enrolled, approved, and online.
- Revoke the registration.

Run creation uses the authenticated account's runner state. With no enrolled runner, `/capabilities` reports `setup_required` with `runner_not_enrolled`. An enrolled but unreachable runner reports `temporarily_disabled` with `runner_offline`. A hosted runner can use the same run contract when that mode becomes available.

## Human action

`claim_required`, `setup_required`, and `approval_required` identify actions the agent cannot grant itself. `plan_required` can include a short-lived opaque Neotask URL for an eligible, server-recognized operation. The URL contains no bearer token, tenant identifier, email address, or Stripe identifier. It discloses nothing until the correct human account signs in, and it creates Stripe Checkout only after that user confirms.