> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.id.me/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.id.me/_mcp/server.

# Overview

> OpenID Connect

ID.me uses OpenID Connect (OIDC), built on top of [OAuth 2.0 RFC6749](https://datatracker.ietf.org/doc/html/rfc6749), to authorize access to its APIs. OIDC is an open authentication protocol that enables secure user sign-in and identity data exchange. To access a user's data, your application must include both an `access_token` and an `id_token` in requests to ID.me's REST API. These tokens are unique to each user, must be stored securely, and the `access_token` expires 5 minutes after issuance.

ID.me supports both full-page redirects and popup windows for the authorization flow. After registering your application, you'll find sample code, documentation, and options to upload your company logo and customize the button colors within the ID.me interface.

ID.me supports Authorization Code Flow with PKCE (Proof Key for Code Exchange, RFC 7636). PKCE works with OAuth 2.0 Authorization Code Flow and is required by OAuth 2.1 guidance.