Skip to main content
All endpoints below live under /v1/agents/*. Auth is either Authorization: ApiKey <key> (integrator-side) or X-Agent-Auth HMAC header (agent-side, built by the SDK). For full request/response schemas see the API Reference — the Agents group has every endpoint with an interactive playground.

Lifecycle

The prepare / confirm-user / confirm-policies / prepare-policies endpoints require a passkey ceremony in the browser — only the dashboard runs them today. The full list above is shown for understanding the lifecycle; the operator-callable subset (read, control, funding, runtime) is documented in the API Reference under the Agents group.

Read

Control (backend-callable)

Control (passkey-stamped, dashboard-driven)

These operations are destructive and require a passkey ceremony today — they run from the dashboard. The API endpoints exist but aren’t documented in the API Reference until a passkey-stamp prepare/confirm pair ships.

Funding

Funding also requires a passkey ceremony — dashboard-driven today.

Agent runtime (HMAC X-Agent-Auth)