Shield Agent AI

← Docs hub

Customer guide

Signed claims

v1 unsigned JSON stays for old clients. v2 is a signed claim using the control-plane key. It is a control-plane signature, not a PKI certificate.

KindProves
shield-kya-agent-passport-v2 Named agent, merchant, status, version hash, parent, canAct
shield-kya-session-claim-v1 Session: agent, host, model, clearance, risk, issuedAt
  • GET /api/v1/kya/agents/{id}/passport?signed=1
  • GET /api/v1/kya/sessions/{id}/claim
  • POST /api/v1/kya/claims/verify (Pro+ on the price table)

Verify returns valid, expired, revoked, or bad signature. Killing the agent invalidates a live passport. Console: open an agent and download the signed passport.

Docs hub · Install · How KYA works · Source