Praecise Skerry/ Reference/ Agents and credentials
Agents and credentials21
Register the agents that act through the API, give each its own key, and stop one without touching the others. A key bound to an agent is that agent on every call and can only move money under a spend policy. An agent can also sign its requests with a registered Ed25519 key (HTTP Message Signatures, RFC 9421), and can delegate a narrower part of its authority to a child agent. Where access tokens are accepted, an OAuth client approved for an agent can obtain tokens that act as it.
- Agents, newest first. `?customer_id=&status=&parent_agent_id=`get/agents
- Register an agentpost/agents
- One agent, with its status and signing keysget/agents/{id}
- Change an agent's name, operator, description or whether it must sign requestspatch/agents/{id}
- Suspend an agentpost/agents/{id}/suspend
- Resume a suspended agentpost/agents/{id}/resume
- Revoke an agent permanently, with every agent it delegated to and all their keyspost/agents/{id}/revoke
- Mint a key bound to the agentpost/agents/{id}/keys
- The agent's signing keys in forceget/agents/{id}/public-keys
- Register an Ed25519 public key (JWK) the agent signs requests withpost/agents/{id}/public-keys
- Remove a signing keydelete/agents/{id}/public-keys/{kid}
- The OAuth clients approved to act as the agent, newest first, as `oauth_clientsget/agents/{id}/oauth-clients
- Agents oauth clients createpost/agents/{id}/oauth-clients
- Withdraw an OAuth client's approvaldelete/agents/{id}/oauth-clients
- Called with the agent's own credentialpost/agents/{id}/delegations
- Keys listget/keys
- One key: scopes, bound agent, last use, expiryget/keys/{id}
- A new secret for the same keypost/keys/{id}/roll
- Revoke a key, immediatelypost/keys/{id}/revoke
- Agents' public signing keys as a key directory (a JWK Set)get/.well-known/http-message-signatures-directory
- OAuth protected-resource metadata (RFC 9728)get/.well-known/oauth-protected-resource