COSTRINITY

COSTRINITY Agent API

The agent API from COSTRINITY — 17 operation(s) for agent.

GitHub OpenAPI

Operations 20

0 of 20 operations are conformant: apis.io called them with no credentials and the responses matched this contract; 1 more answered but could not be checked against a schema. Checked 2026-11-12. how this works · status file

POST /api/agents/rotate Rotate an agent's API key. #
POST /api/agents Create an agent. Its API key is returned once #
DELETE /api/agents Delete an agent. Its key stops working and its events are deleted with it #
PATCH /api/agents/config Change an agent's heartbeat interval, budget caps, anomaly thresholds and… #
GET /api/events Read one agent's events, newest first (the dashboard timeline) #
DELETE /api/events Delete every event of one agent #
GET /api/events/system Count one agent's system events by type, before deleting them #
DELETE /api/events/system Delete one agent's system events (heartbeat_missed, budget_warning… #
POST /api/commands Send a command to one of your agents (the dashboard's Wake Up button) #
GET /api/stream One agent's live events as Server-Sent Events: connected, event, command… #
GET /api/events/export Download one agent's events as CSV or JSON #
GET /api/graph One agent's activity graph: actions or events as nodes, causal links as edges #
GET /api/cef One agent's events for a SIEM, as CEF, LEEF or JSON #
GET /api/anomaly One agent's anomaly score and the anomalies found in a time window #
GET /api/health With agent_id, one agent's health summary built from its last 7 days of events… observed #
GET /api/stats One agent's statistics: its events, errors and cost over the last 24 hours, its… #
GET /api/compliance One agent's events mapped to SOC 2, PCI DSS, ISO 27001, NIST CSF and GDPR… #
GET /api/search Search agent names, events and alert rules #
POST /api/setup One-command agent self-provisioning: create/resolve an owner and mint an API… #
POST /api/preflight/action-check Safety pre-flight: check a dangerous action (shell / file / DB / network)… #

Documentation

📖
Documentation
https://vitna.costrinity.xyz/docs

Specifications

⚙
OpenAPI
https://artifacts.apis.io/costrinity-xyz/openapi/costrinity-xyz-agent-api-openapi.yml

Other Resources

🔗
APIsJSON
https://artifacts.apis.io/costrinity-xyz/apis.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/costrinity-xyz:costrinity-xyz-agent-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

costrinity-xyz-agent-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: VITNA API (Phase 1) Agent API
  version: 1.1.0
  description: 'The compliance evidence layer for AI agents. Pre-flight compliance checks agents call before they act (consent, breach reportability, EU AI Act classification, cross-border), and audit-grade, signed records of what they did. Phase 1 surface covers region routing labels (one database region is in use today), DPIA/ROPA generation, Data Subject Rights (scoped: answerable only for events linked to a subject via principal_ref at ingest, from the point linkage begins; earlier events are permanently unattributable and cannot be linked retroactively), consent lifecycle, Sahamati AA integration, breach notification, and INR/Razorpay billing for DPDP-IN owners (switched off pending merchant onboarding). Also includes one-command agent self-provisioning (/api/setup, mints a restricted trial key with no signup), a destructive-action safety pre-flight (/api/preflight/action-check), scoped engagement sessions with signed evidence bundles (/api/engagement/*), and account claim by a person, from the claim link (/claim).'
  contact:
    name: COSTRINITY
    email: dpo@costrinity.xyz
    url: https://www.costrinity.xyz/
  license:
    name: Proprietary
    url: https://vitna.costrinity.xyz/terms
servers:
- url: https://vitna.costrinity.xyz
  description: Production
- url: https://vigil-staging.vercel.app
  description: Staging (preview branch)
tags:


# --- truncated at 32 KB (45 KB total) ---
# Full source: https://artifacts.apis.io/costrinity-xyz/openapi/costrinity-xyz-agent-api-openapi.yml