Skip to main content

Palm OAuth + Agent Integration Guide

This document helps you quickly integrate Palm's OAuth authorization and Agent capabilities into your system. It covers three main scenarios:

  1. OAuth Binding — Users scan a web QR code with the PalmxApp to associate their Palm account with a user account in your system. Upon successful binding, you will receive the user's open_id (Palm identity identifier).

  2. OAuth Verification — When a user initiates a sensitive operation (such as a transfer, account deletion, etc.), your backend calls the Palm API to initiate a verification request. The operation is only released after the user confirms via palm scan on the PalmxApp.

  3. Agent Integration — Bind a Palm account to your AI Agent client, enabling it to perform operations on behalf of a real person and initiate step-up verification (see Agent Integration Guide).