Agentic Control Plane Agents API
Agent profiles — the governed identity + limits an agent runs under.
Agent profiles — the governed identity + limits an agent runs under.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/agenticcontrolplane-com:agenticcontrolplane-com-agents-api"
curl "https://apis.io/api/v1/apis?limit=25"
Discovery needs no key. Ratings and market analysis are Pro.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
title: Agentic Control Plane — Gateway Agents API
version: 0.1.0
description: 'The public, gsk_-key-authenticated surface of the ACP gateway: agent profiles, run summaries,
self-introspection (cost / usage / decisions / traces), delegation-chain child-key minting,
scoped-token issuance, the governed model proxy, and the MCP endpoint.
**Rate limits.** Rate-limited endpoints return IETF draft-7 `RateLimit` / `RateLimit-Policy`
headers on every response and a 429 with the same headers when exceeded.
**Errors.** Three envelopes coexist and are documented per-endpoint: `{ error: string }` on
/api/v1/*, `{ error: ''validation_failed'', details }` on schema-validated bodies, and the
OpenAI-compatible `{ error: { message, type, param, code } }` on the model proxy.
**Feature-flagged surfaces.** `/api/v1/keys/child`, `/api/v1/scoped-tokens`, and
`/v1/sandbox-tenants` are deployment-flagged; when disabled they 404.
Human docs: https://agenticcontrolplane.com/agents/configure-as-code — agent-facing site
index: https://agenticcontrolplane.com/llms.txt'
contact:
name: Agentic Control Plane
email: hello@agenticcontrolplane.com
url: https://agenticcontrolplane.com/contact
servers:
- url: https://api.agenticcontrolplane.com
security:
- ApiKeyAuth: []
tags:
- name: Agents
description: Agent profiles — the governed identity + limits an agent runs under.
paths:
/api/v1/agents:
post:
tags:
- Agents
operationId: createAgentProfile
summary: Create an agent profile
description: Creates a governed agent profile. `name` and `model` are required; budget/limit fields default conservatively.
requestBody:
required: true
content:
application/json:
schema:
type: object
description: Agent profile fields. On PATCH the body is strict (unknown fields rejected) and `model` must be on the platform allowlist; see /api/v1 docs for per-field bounds.
properties:
name:
type: string
maxLength: 120
description:
type: string
maxLength: 2000
icon:
type: string
maxLength: 120
model:
type: string
description: Must be an allow-listed model id.
systemPrompt:
type: string
maxLength: 20000
enabledTools:
type: array
items:
type: string
maxItems: 200
scopes:
type: array
items:
type: string
maxItems: 100
maxToolCalls:
type: integer
minimum: 0
maximum: 10000
maxBudgetCents:
type: integer
minimum: 0
maximum: 1000000
maxDurationMs:
type: integer
minimum: 0
maxToolRounds:
type: integer
minimum: 0
maximum: 1000
delegatable:
type: boolean
canDelegate:
type: boolean
maxDelegationDepth:
type: integer
minimum: 0
maximum: 10
additionalProperties: true
responses:
'200':
description: Created.
content:
application/json:
schema:
type: object
properties:
ok:
type: boolean
id:
type: string
additionalProperties: true
'400':
description: Missing required field.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'401':
description: Missing, malformed, invalid, or revoked gsk_ API key.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'500':
description: Server error.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
get:
tags:
- Agents
operationId: listAgentProfiles
summary: List agent profiles
responses:
'200':
description: Profiles, newest first.
content:
application/json:
schema:
type: object
properties:
ok:
type: boolean
profiles:
type: array
items:
type: object
additionalProperties: true
additionalProperties: true
'401':
description: Missing, malformed, invalid, or revoked gsk_ API key.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'500':
description: Server error.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
/api/v1/agents/{id}:
parameters:
- name: id
in: path
required: true
schema:
type: string
get:
tags:
- Agents
operationId: getAgentProfile
summary: Get one agent profile
responses:
'200':
description: The profile.
content:
application/json:
schema:
type: object
properties:
ok:
type: boolean
profile:
type: object
additionalProperties: true
additionalProperties: true
'401':
description: Missing, malformed, invalid, or revoked gsk_ API key.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'404':
description: Not found.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'500':
description: Server error.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
put:
tags:
- Agents
operationId: replaceAgentProfileFields
summary: Update agent profile (lenient)
description: Field-by-field update; unknown fields ignored. Prefer PATCH, which validates strictly.
requestBody:
required: true
content:
application/json:
schema:
type: object
description: Agent profile fields. On PATCH the body is strict (unknown fields rejected) and `model` must be on the platform allowlist; see /api/v1 docs for per-field bounds.
properties:
name:
type: string
maxLength: 120
description:
type: string
maxLength: 2000
icon:
type: string
maxLength: 120
model:
type: string
description: Must be an allow-listed model id.
systemPrompt:
type: string
maxLength: 20000
enabledTools:
type: array
items:
type: string
maxItems: 200
scopes:
type: array
items:
type: string
maxItems: 100
maxToolCalls:
type: integer
minimum: 0
maximum: 10000
maxBudgetCents:
type: integer
minimum: 0
maximum: 1000000
maxDurationMs:
type: integer
minimum: 0
maxToolRounds:
type: integer
minimum: 0
maximum: 1000
delegatable:
type: boolean
canDelegate:
type: boolean
maxDelegationDepth:
type: integer
minimum: 0
maximum: 10
additionalProperties: true
responses:
'200':
description: Updated.
content:
application/json:
schema:
type: object
properties:
ok:
type: boolean
additionalProperties: true
'401':
description: Missing, malformed, invalid, or revoked gsk_ API key.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'404':
description: Not found.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'500':
description: Server error.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
patch:
tags:
- Agents
operationId: patchAgentProfile
summary: Update agent profile (strict, validated)
description: 'Strict zod-validated patch: unknown fields rejected, `model` checked against the platform allowlist, numeric bounds enforced. Rate limited per tenant.'
requestBody:
required: true
content:
application/json:
schema:
type: object
description: Agent profile fields. On PATCH the body is strict (unknown fields rejected) and `model` must be on the platform allowlist; see /api/v1 docs for per-field bounds.
properties:
name:
type: string
maxLength: 120
description:
type: string
maxLength: 2000
icon:
type: string
maxLength: 120
model:
type: string
description: Must be an allow-listed model id.
systemPrompt:
type: string
maxLength: 20000
enabledTools:
type: array
items:
type: string
maxItems: 200
scopes:
type: array
items:
type: string
maxItems: 100
maxToolCalls:
type: integer
minimum: 0
maximum: 10000
maxBudgetCents:
type: integer
minimum: 0
maximum: 1000000
maxDurationMs:
type: integer
minimum: 0
maxToolRounds:
type: integer
minimum: 0
maximum: 1000
delegatable:
type: boolean
canDelegate:
type: boolean
maxDelegationDepth:
type: integer
minimum: 0
maximum: 10
additionalProperties: true
responses:
'200':
description: Patched.
content:
application/json:
schema:
type: object
properties:
ok:
type: boolean
additionalProperties: true
'400':
description: Validation failed.
content:
application/json:
schema:
$ref: '#/components/schemas/ValidationError'
'401':
description: Missing, malformed, invalid, or revoked gsk_ API key.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'404':
description: Not found.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'429':
description: Rate limited. Standard draft-7 RateLimit / RateLimit-Policy headers are set; retry after the window resets.
headers:
RateLimit:
schema:
type: string
description: IETF draft-7 rate-limit header.
RateLimit-Policy:
schema:
type: string
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'500':
description: Server error.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
delete:
tags:
- Agents
operationId: deleteAgentProfile
summary: Delete an agent profile
responses:
'200':
description: Deleted.
content:
application/json:
schema:
type: object
properties:
ok:
type: boolean
additionalProperties: true
'401':
description: Missing, malformed, invalid, or revoked gsk_ API key.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'404':
description: Not found.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'500':
description: Server error.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
/api/v1/agents/{id}/run:
post:
tags:
- Agents
operationId: runAgent
summary: Run an agent
description: Triggers a governed run of the profile. The run executes under the profile's limits (budget, tool rounds, duration) and every tool call is policy-checked and audited.
parameters:
- name: id
in: path
required: true
schema:
type: string
requestBody:
required: false
content:
application/json:
schema:
type: object
additionalProperties: true
responses:
'200':
description: Run result / run reference.
content:
application/json:
schema:
type: object
properties:
ok:
type: boolean
additionalProperties: true
'401':
description: Missing, malformed, invalid, or revoked gsk_ API key.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'404':
description: Not found.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'500':
description: Server error.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
components:
schemas:
Error:
type: object
description: 'Default error shape on /api/v1/*: a single machine-readable-ish message string.'
required:
- error
properties:
error:
type: string
ValidationError:
type: object
description: Returned (HTTP 400) when a zod-validated body or query fails. `details` is the zod treeified error.
required:
- error
properties:
error:
type: string
enum:
- validation_failed
details:
type: object
additionalProperties: true
securitySchemes:
ApiKeyAuth:
type: http
scheme: bearer
description: 'Workspace API key (`gsk_{slug}_…`) as a Bearer token. Mint keys in the console: https://cloud.agenticcontrolplane.com'