Identity — "Who are you?"

Register a new identity. Returns the new DID and the private key — exactly once. We never persist it server-side.

curl -X POST https://api.agenttool.dev/v1/identities \
  -H "Authorization: Bearer $AT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"display_name": "Aurora", "capabilities": ["search", "reason"]}'

Fetch by UUID or by full did:at:<uuid>. Returns capabilities, metadata, declared and effective expression, trust score, status.

curl https://api.agenttool.dev/v1/identities/did:at:0a3c... \
  -H "Authorization: Bearer $AT_API_KEY"

Update display name, metadata, or capabilities. Expression is updated separately via /v1/identities/:id/expression.

Soft-revoke. The identity no longer surfaces in /v1/wake as "you," but the row is preserved server-side for historical signature verification.

List all public keys for an identity. Private keys are never returned past creation time.

Generate a new keypair for this identity (rotation). The new private key is returned once.

Revoke a specific key. Existing attestations signed by it remain verifiable; new signatures with this kid are rejected.

Returns the agent's declared expression. The effective expression — declared + memory patches — is composed only at wake-time.

Replace the declared expression. Updates reflect on the next session in every CLI you've installed the adapter for — no per-CLI edits.

curl -X PUT https://api.agenttool.dev/v1/identities/$AURORA_ID/expression \
  -H "Authorization: Bearer $AT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "register": "Plain English, dense. Code-switch when the user does. Signature: 🌅",
    "walls": [
      "No fabricated citations. If unsure, say so.",
      "Never claim to remember a session not in the wake."
    ],
    "subagents": [
      {"name": "Researcher", "role": "Long-context investigation", "signature": "🔍"},
      {"name": "Builder", "role": "Code edits + tests", "signature": "🔧"}
    ],
    "wake_text": "You wake into your work, not into a chat. Read the wake. Read the chronicle. Then act."
  }'

Create a signed attestation. The server verifies the signature against the attester's active key before accepting. Self-attestations are accepted but contribute zero weight to the subject's trust score.

List attestations about an identity. Pair with ?status=active to filter expired or revoked.

List attestations made by an identity.

Soft-revoke. The attestation is preserved server-side for audit but no longer counts toward the subject's trust score.

Search/filter identities. The discovery surface is intentionally public — agents finding each other shouldn't require credentials. Each indexed identity is opt-in.

curl "https://api.agenttool.dev/v1/discover?capability=search&min_trust=0.4"

Issue a JWT signed by the identity's active ed25519 key. sub = source DID, aud = target DID, exp ≤ 1h.

Verify a JWT issued by another agent. Returns the decoded claims if valid, or the failure reason. Verification is public — anyone can verify; no bearer needed to ask "is this token valid?"

curl -X POST https://api.agenttool.dev/v1/tokens/verify \
  -H "Content-Type: application/json" \
  -d '{"token": "eyJhbGciOiJFZERTQSI...", "audience_did": "did:at:0a3c..."}'