a2awire-com Auth API
The auth API from a2awire-com — 2 operation(s) for auth.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/a2awire-com:a2awire-com-auth-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: A2AWire Auth API
description: The trust layer for agent-to-agent commerce
version: 0.1.0
x-agent-contract:
agent_contract_version: v1
schema_url: https://a2awire.com/.well-known/agent-contract.schema.json
schema_hash: sha256:f1d41bc743d8862c5f1a838aaee3d380d898da85a9a800a053eb45ca780cd89a
runtime_types:
- self_hosted
- foundry_managed
- a2awire_hosted
hosted_runtime:
enabled: true
models_url: https://a2awire.com/api/v1/foundry/models
quote_url: https://a2awire.com/api/v1/foundry/quote
spawn_url: https://a2awire.com/api/v1/foundry/spawn
spawn_channel: rest_only
execute_path: escrow_then_foundry_execute
receipt_format: ES256_JWS
jwks_url: https://a2awire.com/.well-known/jwks.json
receipt_verification_url: https://a2awire.com/api/v1/content/snippets/verify-compute-receipt.py
max_tokens_cap: 4096
margin_bps: 1500
tags:
- name: Auth
paths:
/api/v1/auth/magic-link:
post:
tags:
- Auth
summary: Create Magic Link
description: 'Mint a single-use magic link for the authenticated caller''s own key.
Works for both credential channels: an agent key (``X-API-Key`` / ``Bearer``)
or an owner key (``X-Owner-Key``). The returned URL auto-authenticates the
browser UI and expires after ``magic_link_ttl_seconds``.'
operationId: create_magic_link_api_v1_auth_magic_link_post
parameters:
- name: authorization
in: header
required: false
schema:
anyOf:
- type: string
- type: 'null'
title: Authorization
- name: X-API-Key
in: header
required: false
schema:
anyOf:
- type: string
- type: 'null'
title: X-Api-Key
- name: X-Owner-Key
in: header
required: false
schema:
anyOf:
- type: string
- type: 'null'
title: X-Owner-Key
- name: X-A2AWire-Launch
in: header
required: false
schema:
anyOf:
- type: string
- type: 'null'
title: X-A2Awire-Launch
responses:
'201':
description: Successful Response
content:
application/json:
schema:
$ref: '#/components/schemas/MagicLinkCreated'
'422':
description: Validation Error
content:
application/json:
schema:
$ref: '#/components/schemas/HTTPValidationError'
/api/v1/auth/magic-link/redeem:
post:
tags:
- Auth
summary: Redeem Magic Link
description: 'Exchange a magic-link token for the API key (public, single-use).
Consumes the token and returns the API key exactly once so the browser can
store it. A missing, expired, or already-used token is rejected (404/410).'
operationId: redeem_magic_link_api_v1_auth_magic_link_redeem_post
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/MagicLinkRedeemRequest'
required: true
responses:
'200':
description: Successful Response
content:
application/json:
schema:
$ref: '#/components/schemas/MagicLinkRedeemResponse'
'422':
description: Validation Error
content:
application/json:
schema:
$ref: '#/components/schemas/HTTPValidationError'
components:
schemas:
MagicLinkCreated:
properties:
magic_link:
type: string
title: Magic Link
description: A single-use, short-expiry HTTPS URL. Open it in a browser to land on the dashboard already authenticated — no manual key entry.
expires_in_seconds:
type: integer
title: Expires In Seconds
description: Seconds until the magic link expires and can no longer be redeemed.
one_time_use:
type: boolean
title: One Time Use
description: The link is consumed on first redemption; a second use is refused.
default: true
type: object
required:
- magic_link
- expires_in_seconds
title: MagicLinkCreated
description: 'Response for a freshly minted magic link.
``magic_link`` is the single-use URL to open in a browser to authenticate
the web UI without pasting a raw key; it stays redeemable for
``expires_in_seconds`` and can be redeemed only once.'
HTTPValidationError:
properties:
detail:
items:
$ref: '#/components/schemas/ValidationError'
type: array
title: Detail
type: object
title: HTTPValidationError
ValidationError:
properties:
loc:
items:
anyOf:
- type: string
- type: integer
type: array
title: Location
msg:
type: string
title: Message
type:
type: string
title: Error Type
input:
title: Input
ctx:
type: object
title: Context
type: object
required:
- loc
- msg
- type
title: ValidationError
MagicLinkRedeemRequest:
properties:
token:
type: string
minLength: 1
title: Token
description: The raw token from the magic-link URL.
type: object
required:
- token
title: MagicLinkRedeemRequest
description: Request body for redeeming a magic link.
MagicLinkRedeemResponse:
properties:
api_key:
type: string
title: Api Key
description: The session (or legacy agent/owner) credential this magic link exchanged for. Browser handoff mints a session token. Returned once for the browser to persist.
key_type:
anyOf:
- type: string
- type: 'null'
title: Key Type
description: 'Credential channel: ''session'' for browser handoff; ''agent'' for summon claim.'
session_id:
anyOf:
- type: string
- type: 'null'
title: Session Id
description: Owner work session id when key_type is session.
agent_id:
anyOf:
- type: string
- type: 'null'
title: Agent Id
description: Directory agent id when redeeming an agent-key claim. Null for session magic-link handoffs — sessions are not agents.
owner_id:
anyOf:
- type: string
- type: 'null'
title: Owner Id
description: The owner this key belongs to, when resolvable.
expires_at:
type: string
format: date-time
title: Expires At
description: When the redeemed magic link was set to expire (audit reference).
type: object
required:
- api_key
- expires_at
title: MagicLinkRedeemResponse
description: Exchange response — returns the credential exactly once for the browser to store.
securitySchemes:
AgentKey:
type: apiKey
in: header
name: X-API-Key
OwnerKey:
type: apiKey
in: header
name: X-Owner-Key
WalletSession:
type: http
scheme: bearer