{"api_version":"v0.5.5","endpoints":{"verify":"POST /v1/verify","activate_covenant":"POST /v1/covenants","authorize_covenant_action":"POST /v1/authorizations","record_outcome":"POST /v1/outcomes","audit_insights":"GET /v1/insights"},"content_type":"application/json","request_schema":{"agent":{"id":"string","owner":"string | null"},"principal":"{ id: string } | null","action":{"type":"string","target":"string","parameters":"JSON object","is_reversible":"boolean (optional; supplied assertion)"},"authority":{"allowed_actions":["string"],"constraints":{"max_amount":"number (optional)","currency":"ISO 4217 code (optional)","allowed_targets":["string (optional)"],"blocked_targets":["string (optional)"],"allowed_sensitive_actions":["string (optional)"],"require_review_for_irreversible":"boolean (optional)"}},"context":{"request_id":"string | null","timestamp":"ISO-8601 | null","source":"a2a | mcp | rest | internal | unknown"},"grant":"compact JWS signed by the principal, binding this exact authority to this agent (optional)"},"decisions":["ALLOW","REVIEW","BLOCK"],"enforcement":{"evaluation_mode":"No VIZIER_API_KEY: REVIEW or BLOCK only","authenticated_mode":"VIZIER_API_KEY configured: Bearer credential required for verification","covenant_mode":"VIZIER_API_KEY and RECEIPT_SIGNING_KEY configured: authenticated lifecycle with ES256 receipts","insights_mode":"VIZIER_API_KEY and D1 configured: authenticated metadata-only operational counts","delegation_mode":"VIZIER_PRINCIPAL_KEYS configured: a principal-signed grant is verified against a registered key, and the receipt records it"},"delegation":{"grant_field":"grant","grant_media_type":"compact JWS, typ vizier-delegation+jws, alg ES256","registered_principals":0,"principal_keys_configured":false,"principal_keys_valid":true,"authority_provenance":["principal_signed","trusted_integration","unverified"],"note":"Without a grant the authority is whatever the caller asserts. A grant that does not verify is BLOCK, never a downgrade to the caller-asserted path."},"machine_contracts":{"openapi_3_1":"/openapi.json","openapi_well_known_alias":"/.well-known/openapi.json","ai_catalog":"/.well-known/ai-catalog.json","agent_card":"/.well-known/agent-card.json","mcp_server_manifest":"/.well-known/mcp.json","receipt_keys":"/.well-known/jwks.json"},"examples":"/examples"}