v2

latestOpenAPI 3.0.3Apache 2.0raw.githubusercontent.com2026-01-12412664.0 KB

Authentication

Exchange Signed Challenge for JWT

Authenticate an agent by verifying a signed nonce and return a JWT access token with embedded permissions and resource scopes.

post/auth/token

Request body

agent_idstring required

noncestring required

signaturestring base64 required

Base64-encoded Ed25519 signature of the nonce

Example request

{
  "agent_id": "agent-ebd9cd4a-1234-5678-90ab-cdef01234567",
  "nonce": "2024-01-15T10:30:00Z-agent-ebd9cd4a-1234567890abcdef",
  "signature": "MEUCIQCxxx..."
}

Response

JWT token issued successfully

access_tokenstring

JWT access token with embedded agent permissions

token_typestring

Example response

{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "token_type": "bearer"
}