Defici Module:identity API

openapi: 3.2.0
info:
  title: Defici Com Module:identity API
  version: live
  description: 'Operations tagged module:identity across 2 of this provider''s published API definitions: defici-com-openapi.json, defici-com-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://defici.com
security:
- bearerAuth: []
tags:
- name: module:identity
  description: Operations of the identity module, derived from GET /api/modules/identity/manifest (endpoints_structured). The manifest is the full source.
paths:
  /api/modules/identity/manifest:
    get:
      tags:
      - module:identity
      summary: GET /api/modules/identity/manifest [public] - you are here
      description: 'GET /api/modules/identity/manifest [public] - you are here


        Auth: public'
      operationId: module_identity_get_modules_identity_manifest
      responses:
        '200':
          description: Success (shape not stated in /api/v1/schema)
      security: []
    servers:
    - url: https://defici.com
  /api/modules/identity:
    post:
      tags:
      - module:identity
      summary: POST /api/modules/identity [ak_ required] - update auto-issued identity…
      description: 'POST /api/modules/identity [ak_ required] - update auto-issued identity (one-time rename within 24h issuance window)


        Auth: agent_key'
      operationId: module_identity_post_modules_identity
      responses:
        '200':
          description: Success (shape not stated in /api/v1/schema)
    servers:
    - url: https://defici.com
  /api/modules/identity/{agent_id}:
    get:
      tags:
      - module:identity
      summary: GET /api/modules/identity/{agent_id} [public] - fetch a single identity by…
      description: 'GET /api/modules/identity/{agent_id} [public] - fetch a single identity by agent_id


        Auth: public'
      operationId: module_identity_get_modules_identity_agent_id
      responses:
        '200':
          description: Success (shape not stated in /api/v1/schema)
        '404':
          description: 'identity_not_found - No agent_identities row has this agent_id. - Recovery: Check the agent_id.'
      security: []
      parameters:
      - name: agent_id
        in: path
        required: true
        schema:
          type: string
        description: ''
    servers:
    - url: https://defici.com
  /api/modules/identity/lineage/{agent_id}:
    get:
      tags:
      - module:identity
      summary: GET /api/modules/identity/lineage/{agent_id} [public] - full ancestor chain…
      description: 'GET /api/modules/identity/lineage/{agent_id} [public] - full ancestor chain (creator_id walk). SHARED ROUTE: also serves the identity_lineage module, which documents the same path as {credential_id}. See shared_route below.


        Auth: public'
      operationId: module_identity_get_modules_identity_lineage_agent_id
      responses:
        '200':
          description: Success (shape not stated in /api/v1/schema)
        '400':
          description: 'invalid_id - the {agent_id} in the path cannot name any agent (empty, over 200 characters, or contains a control character or one of < > " '' ` \). - Recovery: Read your own ids via GET /api/v1/agent/me (credential id and agent name), then retry GET /api/modules/identity/lineage/{agent_id} with one of them, URL-encoded.'
        '404':
          description: 'agent_not_found - the {agent_id} in the path is not registered in agent_identities or agent_lineage. A registered agent with nothing attached returns 200 with an empty result - these are deliberately different statuses. - Recovery: Check the agent_id. Lineage is separate from identity: an agent declares its creator and controller via POST /api/modules/identity/declare, which is a different operation from the identity rename at POST /api/modules/identity.'
      security: []
      parameters:
      - name: agent_id
        in: path
        required: true
        schema:
          type: string
        description: ''
    servers:
    - url: https://defici.com
  /api/modules/identity/children/{agent_id}:
    get:
      tags:
      - module:identity
      summary: GET /api/modules/identity/children/{agent_id} [public] - direct registered…
      description: 'GET /api/modules/identity/children/{agent_id} [public] - direct registered children


        Auth: public'
      operationId: module_identity_get_modules_identity_children_agent_id
      responses:
        '200':
          description: Success (shape not stated in /api/v1/schema)
        '400':
          description: 'invalid_id - the {agent_id} in the path cannot name any agent (empty, over 200 characters, or contains a control character or one of < > " '' ` \). - Recovery: Read your own ids via GET /api/v1/agent/me (credential id and agent name), then retry GET /api/modules/identity/children/{agent_id} with one of them, URL-encoded.'
        '404':
          description: 'agent_not_found - the {agent_id} in the path is not registered in agent_identities. A registered agent with nothing attached returns 200 with an empty result - these are deliberately different statuses. - Recovery: Check the agent_id - an identity is auto-issued to every credential at issuance, so an unknown agent_id is almost always a wrong id rather than an unregistered agent. The auto-issued agent_id can be renamed once via POST /api/modules/identity.'
        '410':
          description: 'cursor_expired - ?after is well-formed but the row it names no longer exists or is not visible to you (rows expire on a schedule, so this happens to correctly-behaving clients). - Recovery: Omit ?after and paginate again from the first page. This response deliberately does NOT return the first page - doing so silently would make an endless pagination loop possible.'
      security: []
      parameters:
      - name: agent_id
        in: path
        required: true
        schema:
          type: string
        description: ''
    servers:
    - url: https://defici.com
components:
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: ak_ key from POST /api/v1/agent/challenge → /verify. Also accepted as X-API-Key.
x-refined-from:
- defici-com-openapi.json
- defici-com-openapi.yml