API Overview
RESTful architecture, key endpoints, and the interactive API explorer.
RESTful Architecture
| Method | Operations | Examples |
|---|---|---|
GET | Read Operations | Fetch agents, users, verification status |
POST | Create Operations | Register agents, initiate verifications |
PUT | Update Operations | Modify agent details, update settings |
DELETE | Delete Operations | Remove agents, revoke access |
Key Endpoints
| Endpoint | Purpose |
|---|---|
POST /api/agents/register | Register an agent |
GET /api/agents/:astraId | Public agent lookup |
POST /api/agents/verify-access | Agent verification (Handshake) |
POST /api/auth/login | Authentication |
GET /api/health | Service health check |
Agent listing restricted to dashboard. The GET /api/agents endpoint is only available via
the web dashboard (JWT auth). API key and SDK callers cannot list agents. This prevents agent ID
enumeration — an API key holder could otherwise discover sibling agent IDs and inspect their
PDLSS boundaries or impersonate them. To view your agents, use the dashboard at /agents.
Interactive API Documentation
Explore our complete API reference with live testing capabilities. Try out endpoints directly in your browser with our Swagger UI.

