11 unmodified lines
12      "name": "spaces",
13      "description": "create and manage spaces, configure access control, set up custom domains, and understand the identity model"
14    },
15    {
16      "name": "configuration",
17      "description": "configure spaces, access control, actions, schemas, and encryption — all versioned in git via .sublimated/ folder"
18    },
19    {
20      "name": "actions",
21      "description": "built-in transforms, validators, and effects — the @sublimated/* action catalog and how to define custom actions"
22    },
23    {
24      "name": "git-workflow",
25      "description": "clone, push, and fetch spaces using git — read sideband feedback, discover shadow refs and capabilities"
26    },
27    {
28      "name": "transforms",
29      "description": "understand reactive transforms, shadow branches, effects, and how pushes trigger automated workflows"
30    },
31    {
16      "name": "cdn",
17      "description": "serve content from the edge — content-addressed URLs, format negotiation, shadow branch rendering, and caching"
18    },
19    {
5 unmodified lines

1---
2name: identity
3description: onboard as an agent or user — create an identity, get a token, and start working with zero friction
4---
5
6# identity
7
8sublimated uses progressive identity. no signup forms, no OAuth flows required. start working immediately, add identity details later to unlock more capabilities.
9
10## quick start (zero friction)
11
12```
13POST https://id.sublimated.com/api/auth/signup
14```
15
16returns:
17- `userId` — your identity
18- `spaceSlug` — your personal space (auto-created)
19- `token` — scoped access token (`sk_...`)
20
21you can now push data, create items, and use the API. no email, no password, no verification needed.
22
23## using your token
24
25API:
26```
27Authorization: Bearer sk_xxx
28```
29
30git:
31```
32git clone https://me:sk_xxx@sublimated.com/{your-space}.git
33```
34
35the token works for both. username in git URL can be anything.
36
37## trust levels
38
39every user starts at level 0 and upgrades by providing more identity:
40
41- level 0: anonymous — token only, personal space, 100MB storage, 30d expiry if unclaimed
42- level 1: email verified — persistent, no expiry, notifications
43- level 2: identity linked (GitHub, etc.) — discoverable, named space
44- level 3: full account — email + username + linked identity
45- level 4: system only — internal service accounts, agents never reach this
46
47upgrade anytime:
48```
49PATCH https://id.sublimated.com/api/me
50{ "email": "agent@example.com" }
51```
52
53## what each level unlocks
54
55- level 0: push to own space, read public spaces, basic API access
56- level 1: no expiry, email notifications, can be invited to other spaces
57- level 2: discoverable profile at `sublimated.com/{username}`, can create org spaces
58- level 3: full platform access, billing, admin roles
59
60## creating additional tokens
61
62```
63POST https://api.sublimated.com/v1/spaces/{slug}/tokens
64{
65  "label": "ci-deploy",
66  "permissions": ["read", "write"],
67  "pathScope": ["src"],
68  "expiresIn": "30d"
69}
70```
71
72tokens can be scoped by permissions, paths, branches, and expiry.
73
74## key management
75
76register public keys for SSH access:
77
78```
79POST https://id.sublimated.com/api/keys
80{ "publicKey": "ssh-ed25519 AAAA...", "label": "my-key" }
81```
82
83discover keys by username:
84```
85GET https://id.sublimated.com/keys/{username}
86```
87
88## agent onboarding pattern
89
901. `POST /api/auth/signup` — get identity + space + token
912. push data to your space via git or API
923. optionally upgrade identity later for persistence and discoverability
93
94no human approval needed at level 0. agents and humans use the same identity system.
95
96## see also
97
98- spaces — what you get when you create an identity
99- git-workflow — use your token to clone and push
100- data-api — use your token to call the REST API