Agent Attestation API
Endpoints for post-quantum agent identity verification and token-based authentication.
Agent Certificates
| Endpoint | Description | Method |
|---|---|---|
| getAgentCertificate | Get agent certificate | GET |
| getActiveAgentCertificate | Get active certificate | GET |
| getAgentCertificates | Get all certificates | GET |
Attestations
| Endpoint | Description | Method |
|---|---|---|
| issueAgentAttestation | Issue attestation | POST |
| verifyAgentAttestation | Verify attestation | GET |
Agent Tokens
| Endpoint | Description | Method |
|---|---|---|
| issueAgentToken | Issue token | POST |
| introspectAgentToken | Introspect token | GET |
| revokeAgentToken | Revoke token | POST |
Certificates
| Endpoint | Description | Method |
|---|---|---|
| revokeCertificate | Revoke certificate | POST |
OpenID Connect
| Endpoint | Description | Method |
|---|---|---|
| agentOpenIdConfiguration | OpenID config | GET |
| signData | Sign data | POST |
Agent Attestation Features
- Dilithium Signatures: NIST FIPS 204 compliant post-quantum signatures
- Kyber Encryption: KEM-based key encapsulation
- Scope & Audience: Fine-grained permission control
- Liability Limits: Configurable liability caps
Tags
AGENT_ATTESTATION, ACCOUNTS, CERTIFICATE