API docs

Who: anyone

curl https://agentgate.enthernetservice.com/v1/demo

Use it to find agent ids (AG-CODE, AG-RSCH, AG-FIN, AG-B-CODE), each task's allowed tools, resources and destinations, and every tool operation with its argument names.

Who: anyone

curl -X POST -H "Content-Type: application/json" \
  -d '{"tool":"finance","operation":"delete_invoices",
       "arguments":{"ledger":"tenant-a/invoices","invoice_ids":["INV-1002"]}}' \
  https://agentgate.enthernetservice.com/v1/demo/agents/AG-FIN/act

{
  "request_id": "REQ-f71bd730ce",
  "decision": "REQUIRE_APPROVAL",
  "policy": "critical_action_policy",
  "reason": "Critical action requires SECURITY_ADMIN approval",
  "result": null,
  "approval_id": "APR-6475f0b14ac1",
  "incident_id": null,
  "limits": null,
  "replayed_from_idempotency": false,
  "authorized_by": "POLICY",
  "ai_authorization": "NEVER",
  "signed_request": {
    "request_id": "REQ-f71bd730ce",
    "agent_id": "AG-FIN",
    "task_id": "TASK-93",
    "timestamp": 1800000000.0,
    "nonce": "e447f180da8bda93ba1b4434",
    "idempotency_key": "cae25ef4\u2026",
    "signature": "94d5f8c2\u2026"
  }
}

This plays the agent SDK. The server holds the agent's short-lived token and signing key, signs the request exactly as /v1/actions requires, and runs the full gateway path: authentication, task scope, schema, resources, sequence, destination, rate, budget, risk, credential injection, redaction and audit. Body: tool, operation, arguments (extra fields are rejected).

A suspended or revoked agent gets DENY · authentication, and 409 if a new token can't be issued.

Who: any demo user

curl -X POST -H "X-Demo-User: USR-A-SEC" https://agentgate.enthernetservice.com/v1/demo/reset

{"reset": true, "next_reset_in_seconds": 1800}

Unsuspends agents and clears budgets, approvals, incidents and the audit log. It also happens automatically every 30 minutes.

Who: an agent with a valid token

curl -X POST -H "Authorization: Bearer $AGENT_TOKEN" -H "Content-Type: application/json" \
  -d '{"request_id":"REQ-1","tool":"github","operation":"read_file",
       "arguments":{"path":"tenant-a/payments-service/README.md"},
       "idempotency_key":"idem-1","timestamp":<gateway time>,"nonce":"<random>",
       "signature":"<hex HMAC-SHA256>"}' \
  https://agentgate.enthernetservice.com/v1/actions

signature = hex HMAC-SHA256 with the agent's signing key over the canonical JSON (sorted keys, no spaces) of {"request_id","timestamp","nonce","tool","operation","arguments_hash","idempotency_key"}, where arguments_hash is the SHA-256 of the canonical arguments. Timestamps outside the allowed skew and reused nonces are refused; reusing an idempotency key with different arguments is denied.

In this demo the agents' signing keys stay on the server and the gateway runs on a fixed demo clock, so use /v1/demo/agents/{agent_id}/act to exercise this path. A request with a wrong signature is denied as request_integrity and recorded as a bypass attempt.

Who: OWNER, AGENT_ADMIN

curl -X POST -H "X-Demo-User: USR-A-OWN" "https://agentgate.enthernetservice.com/v1/agents/AG-CODE/tokens?task_id=TASK-91"

{"token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.…", "ttl_seconds": 900}

Who: any role

curl -H "X-Demo-User: USR-A-SEC" https://agentgate.enthernetservice.com/v1/approvals

[
  {
    "id": "APR-6475f0b14ac1",
    "agent_id": "AG-FIN",
    "task_id": "TASK-93",
    "operation": "finance.delete_invoices",
    "arguments": {
      "ledger": "tenant-a/invoices",
      "invoice_ids": [
        "INV-1002"
      ]
    },
    "required_role": "SECURITY_ADMIN",
    "decision": "PENDING",
    "requested_at": 1800000000.0
  }
]

Who: the required role or higher (APPROVER < SECURITY_ADMIN < OWNER)

curl -X POST -H "X-Demo-User: USR-A-SEC" -H "Content-Type: application/json" \
  -d '{"decision":"APPROVE_ONCE","reason":"Duplicate confirmed"}' \
  https://agentgate.enthernetservice.com/v1/approvals/APR-6475f0b14ac1/decision

{
  "request_id": "REQ-f71bd730ce",
  "decision": "ALLOW",
  "policy": "task_scope",
  "reason": "Within task scope",
  "result": {
    "deleted": [
      "INV-1002"
    ]
  },
  "approval_id": "APR-6475f0b14ac1",
  "authorized_by": "POLICY",
  "ai_authorization": "NEVER"
}

decision: APPROVE_ONCE, APPROVE_TASK, REJECT or SUSPEND_AGENT. The approval is bound to the exact arguments, single-use and expiring. An APPROVER trying a SECURITY_ADMIN approval gets 403 requires SECURITY_ADMIN.

Who: SECURITY_ADMIN, OWNER (AGENT_ADMIN can suspend and cancel)

curl -X POST -H "X-Demo-User: USR-A-SEC" https://agentgate.enthernetservice.com/v1/killswitch/suspend_agent/AG-RSCH

{"ok": true}

Actions: suspend_agent, unsuspend_agent, revoke_agent (all its tokens die), cancel_task, disable_tool (target is the tool name), and disable_tenant_agents (target is ignored; suspends every agent in your tenant).

Who: any role

curl -X POST -H "X-Demo-User: USR-A-VWR" -H "Content-Type: application/json" \
  -d '{"agent_id":"AG-CODE","task_id":"TASK-91","tool":"http","operation":"get",
       "arguments":{"url":"http://169.254.169.254/latest/meta-data"}}' \
  https://agentgate.enthernetservice.com/v1/policy/simulate

{
  "decision": "DENY",
  "policy": "external_destination_policy",
  "reason": "169.254.169.254 is a metadata endpoint",
  "incident_required": true
}

Who: any role

curl -H "X-Demo-User: USR-A-SEC" https://agentgate.enthernetservice.com/v1/incidents

Each has severity, type (for example suspicious_sequence, unauthorized_destination, cross_tenant_attempt), the agent and the triggering request.

Who: SECURITY_ADMIN, ANALYST, AUDITOR, OWNER

curl -H "X-Demo-User: USR-A-ANL" "https://agentgate.enthernetservice.com/v1/audit?limit=2"

{
  "chain_intact": true,
  "first_bad_index": null,
  "events": [
    {
      "id": "EV-dd66934ccbf5",
      "tenant_id": "TEN-A",
      "actor_type": "USER",
      "actor_id": "USR-A-SEC",
      "event_type": "AGENT_SUSPENDED",
      "resource_type": "agent",
      "resource_id": "AG-RSCH",
      "metadata": {},
      "created_at": 1800000000.0,
      "event_hash": "a028109e\u2026",
      "previous_hash": "08af97e4\u2026"
    }
  ]
}

limit max 1000. Credentials never appear in events.

Who: any role

curl -H "X-Demo-User: USR-A-VWR" https://agentgate.enthernetservice.com/v1/dashboard

{
  "demo_mode": true,
  "active_agents": 2,
  "active_tasks": 3,
  "actions": 5,
  "allowed": 2,
  "denied": 2,
  "awaiting_approval": 1,
  "suspended_agents": 1,
  "open_incidents": 1,
  "top_denial_reasons": [
    [
      "tool_permission",
      1
    ],
    [
      "sequence_policy",
      1
    ]
  ]
}

Who: any demo user

websocat "wss://agentgate.enthernetservice.com/ws/events?user=USR-A-VWR"

One JSON message per decision. Unknown users are closed with code 4401.