# AllClear

> AllClear is a portable account holding a person's own verified records, consolidated from many providers and shared only with the apps and AI agents they authorize. Developers connect once over standard OAuth 2.1 (PKCE), OpenID Connect and MCP; no SDK is required. Health records and verified identity are live in production today. Other data domains (finance, insurance, employment, education, housing) are coming.

Health Bank One is the first app built on AllClear. Registration is open and immediate: an app registers itself, with no API keys and no approval step. There is no pricing yet; developer terms and pricing are published before they apply.

Live today: OAuth 2.1 authorization with scoped, revocable tokens; Identity over OpenID Connect (discovery, JWKS, signed `id_token`, `/userinfo`); health records over MCP at `https://mcp.app.allclearid.com/mcp`; the Partner API (through a partner agreement). Coming: step-up authorization, calling the Consumer APIs (documents, contributions, messaging) with a user's OAuth token, and every data domain except health.

## Build with AllClear

- [Connection API reference](https://www.allclearid.com/docs): Step-by-step guide with real production responses: discovery, client registration, OAuth with PKCE, token exchange, calling MCP tools, refresh, revoke. Section 0 holds instructions you can hand to your coding agent.
- [Home and live demo](https://www.allclearid.com/): Overview of what an agent gets (authorization, identity, context over MCP, consumer APIs), the consent flow, the MCP tool catalog, and a working connection demo using your own AllClear account.

## Partner API

- [Partner API documentation](https://www.allclearid.com/partners): Server-to-server access across all of a partner's connections, using partner-signed tokens over mTLS. Available through a partner agreement.
- [Partner API OpenAPI spec](https://www.allclearid.com/partners/openapi.yaml): OpenAPI 3.1 description of the Partner API endpoints and event webhooks.

## Key endpoints

- MCP server: `https://mcp.app.allclearid.com/mcp`
- OAuth protected-resource metadata: `https://mcp.app.allclearid.com/.well-known/oauth-protected-resource`
- Authorization server metadata: `https://oauth.app.allclearid.com/.well-known/oauth-authorization-server`
- OpenID Connect discovery: `https://oauth.app.allclearid.com/.well-known/openid-configuration`
- Scopes: `openid`, `profile`, `email`, `address`, `phone`, `records:read`, `records:add`, `messages:send`, `account:assist`, `offline_access`

## About and policies

- [About AllClear](https://www.allclearid.com/about): What AllClear is, why it exists, and how it brings the Open Banking model to personal information, starting with health.
- [Security and compliance](https://www.allclearid.com/security-compliance)
- [Privacy policy](https://www.allclearid.com/privacy-policy)
- [Terms of service](https://www.allclearid.com/terms-of-service)

## Optional

- Contact: support@allclearid.com (support), sales@allclearid.com (partnerships)