/v1/agents/*. Auth is either Authorization: ApiKey <key> (integrator-side) or X-Agent-Auth HMAC header (agent-side, built by the SDK).
For full request/response schemas see the API Reference — the Agents group has every endpoint with an interactive playground.
Lifecycle
The
prepare / confirm-user / confirm-policies / prepare-policies endpoints require a passkey ceremony in the browser — only the dashboard runs them today. The full list above is shown for understanding the lifecycle; the operator-callable subset (read, control, funding, runtime) is documented in the API Reference under the Agents group.Read
Control (backend-callable)
Control (passkey-stamped, dashboard-driven)
These operations are destructive and require a passkey ceremony today — they run from the dashboard. The API endpoints exist but aren’t documented in the API Reference until a passkey-stamp prepare/confirm pair ships.Funding
Funding also requires a passkey ceremony — dashboard-driven today.