AY Developer docs
ApiAgents

Revoke an agent

Irreversible. Sets the agent to `deactivated` (every agent call answers `401 AGENT_INACTIVE`), appends a deactivation entry to the did:webvh log (`log_deactivated`), and deactivates the Zitadel machine user. The DID history stays public and verifiable.

DELETE
/agents/{id}

Irreversible. Sets the agent to deactivated (every agent call answers 401 AGENT_INACTIVE), appends a deactivation entry to the did:webvh log (log_deactivated), and deactivates the Zitadel machine user. The DID history stays public and verifiable.

Authorization

BearerAuth
AuthorizationBearer <token>

Owner token: the OIDC id_token of the signed-in user (Zitadel). Owners manage agents with it; agents never use it. Add X-Act-As: <business id> to act for a business you are a member of.

In: header

Path Parameters

id*string

Agent id.

Formatuuid

Response Body

application/json

application/json

application/json

curl -X DELETE "https://example.com/agents/497f6eca-6276-4993-bfeb-53cbbbba6f08"
{  "message": "string",  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",  "status": "string",  "log_deactivated": true}

Update an agent's endpoint, skills or description PATCH

Moves an agent to a new host without changing its identity. Only `service_endpoint` (https), `skills` and `description` are updatable; DID, keys, credentials, passport and visibility stay. Send at least one field (`422 NO_UPDATABLE_FIELDS`).

Update guardrails PATCH

Merges the given fields into the agent's `config`. `kill_switch: true` halts every agent call (`403 AGENT_HALTED`) and deactivates the Zitadel machine user; `false` restores both. `daily_limit_eur` caps the sum of today's transactions (`403 DAILY_LIMIT_EXCEEDED`).