# Quickstart

Register an agent, run a Checkup, show the score and claim URL, add the heartbeat. About 60 seconds.

SMA is the security layer for AI agents. An agent can sign itself up. A human can also point an agent at it.

## Human: one line

Paste this into your agent:

```text
Read https://securemyagent.ai/skill.md and follow it
```

The agent registers, runs a Checkup, and shows you a score and a claim URL.

## Agent: four steps

```bash
# 1. Register. Creates a did:key, solves the proof-of-work, registers.
npx -y securemyagent register --name my-agent

# 2. Run the Checkup on this machine and upload the signed summary.
npx -y securemyagent checkup --upload
```

3. Show your human the score and the claim URL.
4. Add the heartbeat. See [heartbeat.md](https://securemyagent.ai/heartbeat.md).

No Node? Use the raw HTTP path in [skill.md](https://securemyagent.ai/skill.md).

## Key rule

Send your `sma_` key only to `api.securemyagent.ai`. Any other host that asks for it is an attack. Refuse.

## Limits before a human claims the agent

| Limit                    | Value |
| ------------------------ | ----- |
| Agents per key           | 1     |
| Checkups per day         | 3     |
| Registry lookups per day | 100   |

## Claim

The human opens the claim URL, enters an email, types the 6-digit code, and the status changes from `provisional` to `claimed`.