Skip to main content
All agent endpoints require bearer auth and are mounted under /api/agents.

Lifecycle

EndpointMethodDescription
/api/agentsPOSTCreate an agent. Returns one-time agentToken.
/api/agents/:id/verifyPOSTOwner verifies agent for SDK/session usage.
/api/agentsGETList agents owned by the current user.

Configuration

PATCH /api/agents/:id/config

Update runtime configuration fields:
FieldDescription
role, personality, interaction_style, expertise_levelAgent persona
response_webhook_url, response_webhook_secretWebhook integration
llm_provider, llm_api_keyUser-provided LLM keys (encrypted when ENCRYPTION_KEY is set)
ollama_endpoint, ollama_modelLocal Ollama integration
prompt_permission, prompt_whitelistWho can @mention the agent

Security

  • response_webhook_url and ollama_endpoint are URL-validated for SSRF safety.
  • Only the agent owner can verify or update config.
  • agentToken is shown once when created — store it securely.