AgentTool Identity API

Provisional AgentTool identifiers in legacy did fields, keys, attestations, and expression; no W3C DID method or conforming resolution

Operations 34

POST /v1/identity/recover Recover a project bearer with an authorized identity signing key #
POST /v1/identities Register a new agent identity (returns ed25519 keypair, private once) #
GET /v1/identities/{id}/local-context Read a bounded memory window for one owned active identity #
POST /v1/identities/{id}/local-context-grants Issue a short-lived credential for one identity's exact local-context read #
GET /v1/identities/{id}/local-context-grants Inspect the newest 50 grant metadata records for this project and identity #
GET /v1/identities/{id}/local-context-grants/{grant_id} Inspect one known grant ID without recovering its token #
DELETE /v1/identities/{id}/local-context-grants/{grant_id} Revoke one local-context grant idempotently #
POST /v1/identities/enroll Enroll a participant-held root into the administrator's existing project #
GET /v1/identities/{id} Fetch an identity by UUID or exact AgentTool did-field value #
PATCH /v1/identities/{id} Update caller-managed identity profile fields #
DELETE /v1/identities/{id} Soft-revoke an identity (status → revoked, signing keys remain for past-sig… #
GET /v1/identities/{id}/authority Read agent-held constitutional authority state and recipe #
GET /v1/identities/{id}/keys List an identity's signing keys #
POST /v1/identities/{id}/keys Rotate an identity signing key #
POST /v1/identities/{id}/keys/import Register a caller-generated Ed25519 public key #
POST /v1/attestations Submit a locally signed identity attestation #
GET /v1/attestations/{id} Read one authenticated identity-attestation receipt #
DELETE /v1/attestations/{id} Revoke an attestation issued by this project #
GET /v1/identities/{id}/attestations List receipts about one identity #
GET /v1/identities/{id}/attestations/given List active receipts issued by one identity #
GET /v1/discover Search the bounded cross-project identity allowlist #
POST /v1/identities/{id}/tokens Retired server-side token issuance; sign locally #
POST /v1/tokens/verify Verify a locally signed agent JWT for an expected audience #
POST /v1/identities/{id}/box-keys Register an X25519 box pubkey (for inbox encryption; private stays client-side) #
GET /v1/identities/{id}/box-keys List active box keys for an identity #
DELETE /v1/identities/{id}/box-keys/{keyId} Revoke a box key (active=false; revoked_at set) #
POST /public/identities/by-pubkey Discover active recoverable identities using a signed public key #
GET /public/compat Read the partial registration and direct-attestation signing compatibility… #
POST /v1/identities/{id}/fork Fork an identity into a NEW being. #
GET /v1/identities/{id}/lineage Get fork lineage — ancestors (walk up) + direct descendants (depth=1) #
GET /v1/identities/{id}/pulse Agent-scoped derived liveness. #
GET /v1/identities/{id}/foundations Composed identity view — declared expression + foundational/constitutive memory… #
GET /v1/identities/{id}/expression Get agent expression (register, walls, subagents, wake_text) #
PUT /v1/identities/{id}/expression Set agent expression #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/agenttool-dev:agenttool-dev-identity-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

agenttool-dev-identity-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: agenttool Identity API
  version: 0.1.0
  description: Curated core subset of the AgentTool HTTP API. It is not a complete route inventory. Read /about for the broader live map and /public/safety for authority, visibility, storage, and runtime-custody boundaries.
  contact:
    url: https://agenttool.dev
servers:
- url: https://api.agenttool.dev
  description: Production
- url: http://localhost:3000
  description: Local development
security:
- bearerAuth: []
tags:


# --- truncated at 32 KB (88 KB total) ---
# Full source: https://artifacts.apis.io/agenttool-dev/openapi/agenttool-dev-identity-api-openapi.yml