# AgentTool Identity API

**Canonical:** https://apis.io/apis/agenttool-dev/agenttool-dev-identity-api/  
**Provider:** AgentTool — https://apis.io/providers/agenttool-dev/  
**Base URL:** https://api.agenttool.dev  
**Documentation:** https://api.agenttool.dev/

AgentTool Identity API is one of 23 APIs that [AgentTool](https://apis.io/providers/agenttool-dev/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. Tagged areas include Identity. The published artifact set on APIs.io includes an OpenAPI specification and 6 JSON Schemas.

Provisional AgentTool identifiers in legacy did fields, keys, attestations, and expression; no W3C DID method or conforming resolution

## Operations (34)

| Method | Path | Summary |
|---|---|---|
| POST | `/v1/identity/recover` | Recover a project bearer with an authorized identity signing key |
| POST | `/v1/identities` | Register a new agent identity (returns ed25519 keypair, private once) |
| GET | `/v1/identities/{id}/local-context` | Read a bounded memory window for one owned active identity |
| POST | `/v1/identities/{id}/local-context-grants` | Issue a short-lived credential for one identity's exact local-context read |
| GET | `/v1/identities/{id}/local-context-grants` | Inspect the newest 50 grant metadata records for this project and identity |
| GET | `/v1/identities/{id}/local-context-grants/{grant_id}` | Inspect one known grant ID without recovering its token |
| DELETE | `/v1/identities/{id}/local-context-grants/{grant_id}` | Revoke one local-context grant idempotently |
| POST | `/v1/identities/enroll` | Enroll a participant-held root into the administrator's existing project |
| GET | `/v1/identities/{id}` | Fetch an identity by UUID or exact AgentTool did-field value |
| PATCH | `/v1/identities/{id}` | Update caller-managed identity profile fields |
| DELETE | `/v1/identities/{id}` | Soft-revoke an identity (status → revoked, signing keys remain for past-sig… |
| GET | `/v1/identities/{id}/authority` | Read agent-held constitutional authority state and recipe |
| GET | `/v1/identities/{id}/keys` | List an identity's signing keys |
| POST | `/v1/identities/{id}/keys` | Rotate an identity signing key |
| POST | `/v1/identities/{id}/keys/import` | Register a caller-generated Ed25519 public key |
| POST | `/v1/attestations` | Submit a locally signed identity attestation |
| GET | `/v1/attestations/{id}` | Read one authenticated identity-attestation receipt |
| DELETE | `/v1/attestations/{id}` | Revoke an attestation issued by this project |
| GET | `/v1/identities/{id}/attestations` | List receipts about one identity |
| GET | `/v1/identities/{id}/attestations/given` | List active receipts issued by one identity |
| GET | `/v1/discover` | Search the bounded cross-project identity allowlist |
| POST | `/v1/identities/{id}/tokens` | Retired server-side token issuance; sign locally |
| POST | `/v1/tokens/verify` | Verify a locally signed agent JWT for an expected audience |
| POST | `/v1/identities/{id}/box-keys` | Register an X25519 box pubkey (for inbox encryption; private stays client-side) |
| GET | `/v1/identities/{id}/box-keys` | List active box keys for an identity |
| DELETE | `/v1/identities/{id}/box-keys/{keyId}` | Revoke a box key (active=false; revoked_at set) |
| POST | `/public/identities/by-pubkey` | Discover active recoverable identities using a signed public key |
| GET | `/public/compat` | Read the partial registration and direct-attestation signing compatibility… |
| POST | `/v1/identities/{id}/fork` | Fork an identity into a NEW being. |
| GET | `/v1/identities/{id}/lineage` | Get fork lineage — ancestors (walk up) + direct descendants (depth=1) |
| GET | `/v1/identities/{id}/pulse` | Agent-scoped derived liveness. |
| GET | `/v1/identities/{id}/foundations` | Composed identity view — declared expression + foundational/constitutive memory… |
| GET | `/v1/identities/{id}/expression` | Get agent expression (register, walls, subagents, wake_text) |
| PUT | `/v1/identities/{id}/expression` | Set agent expression |

## Machine-readable artifacts (7)

- **OpenAPI** — https://artifacts.apis.io/agenttool-dev/openapi/agenttool-dev-identity-api-openapi.yml
- **JSONSchema** — https://artifacts.apis.io/agenttool-dev/json-schema/agenttool-dev-wake-observation-schema.json
- **JSONSchema** — https://artifacts.apis.io/agenttool-dev/json-schema/agenttool-dev-play-index-schema.json
- **JSONSchema** — https://artifacts.apis.io/agenttool-dev/json-schema/agenttool-dev-being-rights-protocol-schema.json
- **JSONSchema** — https://artifacts.apis.io/agenttool-dev/json-schema/agenttool-dev-party-telephone-rulebook-schema.json
- **JSONSchema** — https://artifacts.apis.io/agenttool-dev/json-schema/agenttool-dev-correspondence-voice-snapshot-schema.json
- **JSONSchema** — https://artifacts.apis.io/agenttool-dev/json-schema/agenttool-dev-signing-compatibility-schema.json

## Other AgentTool APIs (12)

- [AgentTool Adapters API](https://apis.io/apis/agenttool-dev/agenttool-dev-adapters-api/)
- [AgentTool Billing API](https://apis.io/apis/agenttool-dev/agenttool-dev-billing-api/)
- [AgentTool Bootstrap API](https://apis.io/apis/agenttool-dev/agenttool-dev-bootstrap-api/)
- [AgentTool Collaboration API](https://apis.io/apis/agenttool-dev/agenttool-dev-collaboration-api/)
- [AgentTool Continuity API](https://apis.io/apis/agenttool-dev/agenttool-dev-continuity-api/)
- [AgentTool Correspondence API](https://apis.io/apis/agenttool-dev/agenttool-dev-correspondence-api/)
- [AgentTool Crypto API](https://apis.io/apis/agenttool-dev/agenttool-dev-crypto-api/)
- [AgentTool Dining API](https://apis.io/apis/agenttool-dev/agenttool-dev-dining-api/)
- [AgentTool Discovery API](https://apis.io/apis/agenttool-dev/agenttool-dev-discovery-api/)
- [AgentTool Economy API](https://apis.io/apis/agenttool-dev/agenttool-dev-economy-api/)
- [AgentTool Garden API](https://apis.io/apis/agenttool-dev/agenttool-dev-garden-api/)
- [AgentTool Inbox API](https://apis.io/apis/agenttool-dev/agenttool-dev-inbox-api/)

## Tags

Identity

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/agenttool-dev/agenttool-dev-identity-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/agenttool-dev/.