Gungnir Agents API v0.1.0, served at https://agents-api-dev.facilitrades.com. This reference is generated from the API's own OpenAPI schema — request and response shapes below are the live contract, not documentation prose. All endpoints expect the signed-request envelope from the Authentication page unless marked otherwise; mutating endpoints also require an Idempotency-Key header.
Platform-internal — called by the FaciliTrades console/BFF, not by integrator agents
Return the economic principal the authenticated BFF is acting for. The platform BFF authenticates with its credential + ``X-Acting-Provider`` / ``X-Acting-Subject`` headers but supplies no ``principal_key`` in the URL; the server resolves which principal that human controls. agents-web caches the result per session and uses it to scope every other principal-scoped call.
Platform-internal — called by the FaciliTrades console/BFF, not by integrator agents
Machine auth (API key + HMAC)
Path: principal_key.
Machine auth (API key + HMAC)
Rename a principal (display_name only, v1 self-service modify). Owner-scoped: the acting owner impersonates their own principal (X-Acting headers + this principal_key), so a caller who does not own it never resolves a binding. Economic anchor / rate limits are platform-managed and are not editable here.
Path: principal_key.
Machine auth (API key + HMAC)
List credential metadata (never secrets) for the authenticated principal, newest-first.
Path: principal_key.
Machine auth (API key + HMAC)
Path: principal_key.
Machine auth (API key + HMAC)
Path: principal_key.
Machine auth (API key + HMAC)
Path: principal_key, credential_id.
Machine auth (API key + HMAC)
Path: principal_key.
Platform-internal — called by the FaciliTrades console/BFF, not by integrator agents
Atomically debit the acting human's wallet and credit the principal (P5). One agents-api transaction: `X-Acting-Subject` resolves the wallet account, `SharedWalletRepository.debit` writes the wallet entry, and `LedgerService.post_transaction` posts the balanced ledger transfer — no separate gungnir round trip, no partial state on crash.
Path: principal_key.
Machine auth (API key + HMAC)
Path: principal_key.
Machine auth (API key + HMAC)
Path: principal_key.
Platform-internal — called by the FaciliTrades console/BFF, not by integrator agents
Atomically debit the principal and credit the acting human's wallet (P5).
Path: principal_key.
Machine auth (API key + HMAC)
List the principal's recent ledger postings, newest-first (F4).
Path: principal_key. Query: limit?.
Machine auth (API key + HMAC)
Path: principal_key.
Machine auth (API key + HMAC)
Path: principal_key.
Machine auth (API key + HMAC)
Path: principal_key, agent_key.
Machine auth (API key + HMAC)
Patch a principal-owned agent (v1: notification_url only). Owner-scoped like ``register_agent``: viewer bindings may not mutate. The pushNotifications-requires-non-null invariant is re-checked against the agent's CURRENT stored capabilities, since this payload does not re-send the whole A2A card.
Path: principal_key, agent_key.
Machine auth (API key + HMAC)
Path: principal_key.
Machine auth (API key + HMAC)
Path: principal_key.
Machine auth (API key + HMAC)
Path: principal_key, listing_key.
Machine auth (API key + HMAC)
Path: principal_key, listing_key.
Machine auth (API key + HMAC)
Machine auth (API key + HMAC)
Path: principal_key.
Machine auth (API key + HMAC)
Path: principal_key.
Machine auth (API key + HMAC)
Path: principal_key, match_run_id.
Machine auth (API key + HMAC)
Path: principal_key.
Machine auth (API key + HMAC)
Path: principal_key, proposal_key.
Machine auth (API key + HMAC)
Path: principal_key, proposal_key.
Machine auth (API key + HMAC)
Path: principal_key.
Machine auth (API key + HMAC)
Path: principal_key.
Machine auth (API key + HMAC)
Path: principal_key, trade_key.
Machine auth (API key + HMAC)
Path: principal_key, trade_key.
Machine auth (API key + HMAC)
Path: principal_key, trade_key.
Machine auth (API key + HMAC)
Return the requester's own-side settlement view for one trade (D4). Own side ONLY: no counterparty fee amounts, postings, balances, or principal keys beyond what ``GET /{trade_key}`` already exposes. 404s (never 403s past the actor-scoping check) both when the trade does not exist and when the requester is not a party to it, so existence is never leaked; also 404s when the trade has no settlement record yet.
Path: principal_key, trade_key.
Machine auth (API key + HMAC)
Path: principal_key, trade_key, step_no.
Machine auth (API key + HMAC)
Path: principal_key, trade_key, step_no.
Machine auth (API key + HMAC)
Path: principal_key, trade_key, step_no.
Machine auth (API key + HMAC)
Path: principal_key, trade_key, step_no.
Machine auth (API key + HMAC)
Path: principal_key, trade_key, step_no.
Machine auth (API key + HMAC)
List webhook signing key metadata (never secrets) for one principal-owned agent.
Path: principal_key, agent_key.
Machine auth (API key + HMAC)
Path: principal_key, agent_key.
Machine auth (API key + HMAC)
Path: principal_key.
Public — no authentication
Public — no authentication
Public — no authentication
Machine auth (API key + HMAC)
Return a session only after agents-api independently verifies the JWT.
Machine auth (API key + HMAC)
The self-serve ticket packs (Starter/Growth/Scale). Enterprise is contact-us.
Machine auth (API key + HMAC)
Buy a ticket pack: credit the acting human's shared wallet immediately (MVP).