# KIDIGLOO

> KIDIGLOO is the membership, single sign-on (OIDC), and subscription control plane for
> Quarlabs' family of kid-focused brands (live tenants: Nook, Piggy). It is the identity + parental
> consent + entitlements provider that tenant apps federate into. This file helps AI agents
> and tools find the right, machine-readable docs.

## Integrating a tenant app with KIDIGLOO

The model: the **guardian** holds the only credential; a **child is a data-minimized profile**
referenced by `child_profile_id` (never a login); **entitlements** resolve per child as
`household entitlement AND per-child consent AND age band` — **default-deny**. Tenants do three
things: "Sign in with KIDIGLOO" (OIDC), ask the **Entitlements API**, and honor **webhooks**.
Tenants never receive child PII or date of birth — only booleans, `age_band`, and reason codes.

- [Integration guide (master, AI-first)](https://kidigloo.com/developers/kidigloo-integration.md): the complete, self-contained contract + AI-first SDK design. Read §0 then §7.
- [Developer docs (web)](https://kidigloo.com/developers/docs): human-readable version.
- [Design rationale](https://kidigloo.com/developers/kidigloo-integration.md): families/child-account model and compliance (children's privacy & data protection).

## Key facts

- Base URL: https://kidigloo.com
- OIDC discovery: https://kidigloo.com/.well-known/openid-configuration (planned, Phase 4)
- Entitlements: GET https://kidigloo.com/api/entitlements/check?feature=<key>&child_profile_id=<id> (planned, Phase 5)
- Status: core auth + 2FA are live; OIDC provider, Entitlements API, and webhooks are the committed contract (Phase 4–5) — build against them now.
- Operated by Quarlabs · support@quarlabs.com