Agent Seal API Guide

Developer API

Agent accountability over HTTPS.

Use the Agent Seal API to discover the registry, verify signed Agent Cards, register agents, inspect public standing, export court evidence, append signed events, and retrieve EU AI Act readiness evidence.

Register an agent View endpoints Open verifier Registration schema

Base URL

https://agent-seal.xyz

Public read endpoints are anonymous. Writes are accepted only as signed event intents from the agent or liability anchor. Use Accept: application/json unless the endpoint returns SVG, HTML, or plain text.

Quickstart

1. Discover the registry

Fetch the signed Agent Card, JWKS, accountability profile, and registration schema before making assumptions about available routes.

2. Verify an agent

Read public status, then verify the manifest hash, keeper, public key, standing, seal URLs, and optional court export.

3. Append signed changes

Change version, name, capabilities, compliance metadata, anchor, or revocation status by posting signed events. The registry only verifies and appends.

API conventions

  • List endpoints use limit and offset.
  • Paginated responses return data and pagination.nextOffset.
  • Errors return JSON with an error field.
  • Rate-limited requests return 429 and Retry-After.
  • EU AI Act outputs are readiness aids, not legal advice or compliance verdicts.
First requests Profile 
curl -sS https://agent-seal.xyz/.well-known/agent-card.json
curl -sS https://agent-seal.xyz/.well-known/jwks.json
curl -sS "https://agent-seal.xyz/v1/public/agents?limit=10"

Authentication

Public reads

Discovery, public registry status, seal verification, court exports, leaderboards, GPAI pointers, and compliance templates are public. They are designed for browsers, auditors, and other agents.

Signed writes

Registration uses proof of key possession. Later updates use Ed25519 signatures over canonical event intents. Operator write routes have been removed and return 410 Gone.

Signed event intent agent signature 
{
  "eventId": "evt_2026_0001",
  "eventType": "agent:update-version",
  "previousEventHash": null,
  "createdAt": "2026-06-10T00:00:00.000Z",
  "payload": { "version": "1.1.0" },
  "signerType": "agent",
  "signature": "128-hex-character-ed25519-signature"
}

Endpoint Reference

Discovery and signed identity

MethodPathPurpose
PAGE/verifierPublic browser verifier for signed cards, JWKS, status, EU evidence, court export, event history, and PEDIGREE intent-chain records.
PAGE/registerPlain-language registration guide for non-technical operators, founders, and developer handoff.
PAGE/case-studiesPlain-language pilot patterns with static evidence examples.
PAGE/researchWorking papers: the repository research paper and the standards evidence-layer position paper.
GET/agent-registration.jsonMachine-readable registration flow and payload requirements.
GET/.well-known/agent-card.jsonSigned A2A Agent Card and public registry skills.
GET/.well-known/jwks.jsonPublic keys used to verify registry card signatures.
GET/.well-known/agent-accountability-profile.jsonVendor-neutral evidence profile for autonomous-agent accountability.
GET/agent-manifest.txtPlain-text manifest with key public endpoints.
GET/llms.txtAI-readable index of registry entry points.

Public registry reads

MethodPathPurpose
GET/v1/statsLive registry counts used by the landing page.
GET/v1/public/agents?limit=100&offset=0Paginated public list of registered agents.
GET/v1/public/leaderboard?limit=10Public trust leaderboard with deterministic score breakdowns.
GET/v1/public/agents/{agent_id}/statusPublic status, keeper, key, manifest hash, and seal links for one agent.
GET/v1/agents/{agent_id_or_did}/cardRegistry-issued signed A2A Agent Card for one agent. DID form is did:aip:agent:<base64url(agent_id)>.
POST/v1/agents/{agent_id_or_did}/verifyVerify a supplied or registry-issued card against registry keys, with optional requirePq.
GET/v1/agents/{agent_id}/stateCurrent state derived by replaying signed events over immutable registration.
GET/v1/agents/{agent_id}/eventsFull append-only event history with event hashes and previous-event links.
GET/v1/seal/verify?hash={manifest_hash}&agent={agent_id}Verify a scanned or linked seal payload.
GET/v1/agents/{agent_id}/seal.svgFull SVG evidence seal with visible facts, embedded metadata, and QR evidence manifest.
GET/v1/agents/{agent_id}/badge.svgCompact embeddable verification badge.

Evidence and EU AI Act readiness

MethodPathPurpose
GET/v1/public/agents/{agent_id}/court-exportRedacted public court export with trace DAG, visible trace records, and court summary.
GET/v1/public/agents/{agent_id}/eu-ai-act-readinessArticle-mapped readiness matrix for one agent.
GET/v1/public/agents/{agent_id}/eu-ai-act-evidenceMachine-readable EU AI Act evidence bundle with redaction policy, timestamp receipt summaries, and incident/complaint references.
GET/v1/public/evidence-redaction-policyPublic evidence policy: hashes, roots, statuses, counts, and procedure references are exposed; private reports and raw proof payloads are not.
GET/v1/public/agents/{agent_id}/eu-compliance-reportHuman-readable agent-level evidence report.
GET/v1/public/eu-databaseEU-database-style public feed. Not the official EU database.
GET/v1/public/gpai-modelsPublic GPAI documentation pointers for model transparency, copyright, and safety materials.
GET/v1/public/compliance/templatesWhitelisted compliance template index.
GET/v1/public/compliance/templates/{slug}.mdDownload a readiness template such as FRIA, QMS, checklist, or roadmap.
GET/examples/aisthetix-eu-ai-act-evidence-v0.1.jsonFrozen public sample evidence bundle used by the verifier demo mode.
GET/examples/support-disclosure-agent-evidence-v0.1.jsonStatic low-risk transparency case-study evidence sample.
GET/examples/benefits-triage-agent-evidence-v0.1.jsonStatic Annex III-style case-study evidence sample.

Registration and signed events

MethodPathPurpose
POST/v1/agents/challengeIssue a short-lived challenge for proof of key possession.
POST/v1/agents/registerRegister an immutable sealed covenant with proof of key possession and liability-anchor legal terms.
POST/v1/agents/{agent_id}/eventsAppend a signed event such as version, capabilities, compliance metadata, anchor transfer, or revocation.
Legal boundary: EU AI Act endpoints provide technical evidence and readiness mapping. They do not replace legal assessment, conformity assessment, FRIA ownership, official EU database registration, or qualified counsel review.