[realmehmetali]

Changes

• declare User-Agent as a required header on the v4 verify OpenAPI operation
• add the header to the primary IDKit and standalone migration backend examples
• teach the LLM integration prompt and World ID skill how to avoid and diagnose bot-protection 403 responses

Why

Backend requests without a user agent can be rejected by bot protection, but neither the generated API reference nor the integration examples made that requirement visible.

Impact

Human readers, generated clients, and coding assistants now receive consistent verification-request guidance.

Closes #82.

Checks

• jq empty openapi/developer-portal.json
• CSpell on the four changed documentation files (0 issues)
• mint broken-links under Node 24 LTS (no broken links)
• OpenAPI v4 verify header assertion and git diff --check

Disclosure

This contribution was prepared with AI assistance and reviewed against the public repository and public issue #82 only. No private code, production data, or internal implementation details were used.

[realmehmetali]

Rebased onto current main and resolved the overlapping World ID docs changes while preserving the User-Agent and 403 guidance. Validation: OpenAPI JSON, spellcheck (134 files), Mint broken links under Node 24, and diff check all pass.

[realmehmetali]

Resolved conflicts against current main, retaining the newer environment-validation example and Selfie Check guidance. The User-Agent requirement from #82 is still absent upstream. Validation passes: OpenAPI JSON and header assertions, spellcheck on the changed docs, and Mint broken-links under Node 24 LTS. The refreshed branch is signed and ready for review.