Prove possession of the developer key
Level 3 only. Sign the raw challenge bytes (base64url-decoded) with the Ed25519 private key whose public key you registered. On success the agent becomes `active`, gets `key_custody: developer` and its Agent Passport. The challenge is valid 10 minutes; after that register again.
Level 3 only. Sign the raw challenge bytes (base64url-decoded) with the Ed25519 private key whose
public key you registered. On success the agent becomes active, gets key_custody: developer
and its Agent Passport. The challenge is valid 10 minutes; after that register again.
Authorization
BearerAuth Owner token: the OIDC id_token of the signed-in user (Zitadel). Owners manage agents with it;
agents never use it. Add X-Act-As: <business id> to act for a business you are a member of.
In: header
Path Parameters
Agent id.
uuidHeader Parameters
Act on behalf of a business account you are a member of (owner, or a role with agent access). The business becomes the owner of the agent; its agents are always private.
uuidRequest Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
application/json
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/agents/497f6eca-6276-4993-bfeb-53cbbbba6f08/attest" \ -H "Content-Type: application/json" \ -d '{ "challenge": "string", "signature": "string" }'{ "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "status": "string", "did": "string", "key_custody": "string", "dev_key": "string", "passport_vc": "string"}