Agent Control Plane
List agents
Retired query-signature endpoint. Runtime returns 410 WALLET_ADMIN_QUERY_DEPRECATED. Use POST /api/agents/list with walletAuth in the JSON body.
Authorize agent
Authenticate with authorization.signature over the agent authorization fields in the JSON body. Runtime checks app/domain binding, validity window, nonce and the requested delegated permissions.
Create agent
Authenticate with authorization.signature over the agent authorization fields in the JSON body. Runtime checks app/domain binding, validity window, nonce and the requested delegated permissions.
Agent detail post
Authenticate with the signed walletAuth JSON body and an allowed Origin when supplied. The runtime verifies the wallet signature, its validity window, and replay nonce; no bearer credential is substituted for the body signature.
Agent events post
Authenticate with the signed walletAuth JSON body and an allowed Origin when supplied. The runtime verifies the wallet signature, its validity window, and replay nonce; no bearer credential is substituted for the body signature.
List agents post
Authenticate with the signed walletAuth JSON body and an allowed Origin when supplied. The runtime verifies the wallet signature, its validity window, and replay nonce; no bearer credential is substituted for the body signature.
Revoke agent
Authenticate with the signed walletAuth JSON body and an allowed Origin when supplied. The runtime verifies the wallet signature, its validity window, and replay nonce; no bearer credential is substituted for the body signature.
Revoke session agents
Authenticate with the signed walletAuth JSON body and an allowed Origin when supplied. The runtime verifies the wallet signature, its validity window, and replay nonce; no bearer credential is substituted for the body signature.
Agent detail
Retired query-signature endpoint. Runtime returns 410 WALLET_ADMIN_QUERY_DEPRECATED. Use POST /api/agents/detail with walletAuth in the JSON body.
Create agent credential
Authenticate with the signed walletAuth JSON body and an allowed Origin when supplied. The runtime verifies the wallet signature, its validity window, and replay nonce; no bearer credential is substituted for the body signature.
Revoke agent credential
Authenticate with the signed walletAuth JSON body and an allowed Origin when supplied. The runtime verifies the wallet signature, its validity window, and replay nonce; no bearer credential is substituted for the body signature.
Agent events
Retired query-signature endpoint. Runtime returns 410 WALLET_ADMIN_QUERY_DEPRECATED. Use POST /api/agents/events with walletAuth in the JSON body.
Rotate agent credential
Authenticate with the signed walletAuth JSON body and an allowed Origin when supplied. The runtime verifies the wallet signature, its validity window, and replay nonce; no bearer credential is substituted for the body signature.
Activate builder
Authenticate with the signed walletAuth JSON body and an allowed Origin when supplied. The runtime verifies the wallet signature, its validity window, and replay nonce; no bearer credential is substituted for the body signature.
Builder subscription
Authenticate with the signed walletAuth JSON body and an allowed Origin when supplied. The runtime verifies the wallet signature, its validity window, and replay nonce; no bearer credential is substituted for the body signature.
Rotate builder order entry key
Authenticate with the signed walletAuth JSON body and an allowed Origin when supplied. The runtime verifies the wallet signature, its validity window, and replay nonce; no bearer credential is substituted for the body signature.
Create mobile session handoff
Authenticate with the signed walletAuth JSON body and an allowed Origin when supplied. The runtime verifies the wallet signature, its validity window, and replay nonce; no bearer credential is substituted for the body signature.
Redeem mobile session handoff
Redeem the one-time handoff capability in the path. No request body or wallet signature is consumed. An allowed Origin is required when supplied; the stored handoff must be active, unexpired and unused. The returned payload remains encrypted.
Revoke mobile session handoff
Authenticate with the signed walletAuth JSON body and an allowed Origin when supplied. The runtime verifies the wallet signature, its validity window, and replay nonce; no bearer credential is substituted for the body signature.
List session keys
Authenticate with the signed walletAuth JSON body and an allowed Origin when supplied. The runtime verifies the wallet signature, its validity window, and replay nonce; no bearer credential is substituted for the body signature.
Register session key
Authenticate with the signed walletAuth JSON body and an allowed Origin when supplied. The runtime verifies the wallet signature, its validity window, and replay nonce; no bearer credential is substituted for the body signature.
Revoke session key
Authenticate with the signed walletAuth JSON body and an allowed Origin when supplied. The runtime verifies the wallet signature, its validity window, and replay nonce; no bearer credential is substituted for the body signature.