Mint a provisional anonymous workspace and API key
Zero-human onboarding entry point. Mints a provisional workspace, its
org API key, and a seeded shadow-mode default policy — no account, no
email. Hard caps: 10 requests per minute, 5 provisional workspaces per
network per 24 hours, and an exploration allowance of 50 governed
decisions per month. The raw key is returned exactly once. Every
dossier a provisional workspace mints carries a SIGNED issuer_context
tier of "provisional_anonymous" inside the dossier claims, so a
verifier can always distinguish it from an owned org's dossier.
Claiming (POST /v1/orgs/{org_id}/claim/start then /claim/verify)
attaches a human owner; the key and the dossier ledger survive the
claim.
The workspace is stamped with what the caller's User-Agent says about
where it came from and nothing else: the product and version, and
for the open-source runtime's agent-safe-pipeline/<version> (repo=<owner/name>; example=<name>; surface=github) form and
Govern's govern/<version> (example=govern@<version>; surface=<runner>; repo=<owner/name>) form, the repository, example
and surface. The stamp is accounting for the acquisition funnel; it
is never decision input and never verified.
Request Body
application/json
Optional display name for the workspace, shown to the claiming owner.
length <= 64Response Body
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/v1/public/agents/provision" \ -H "Content-Type: application/json" \ -d '{}'{ "org_id": "a40f5d1f-d889-42e9-94ea-b9b33585fc6b", "raw_key": "string", "provisional": true, "limits": { "requests_per_minute": 10, "workspaces_per_network_per_day": 5, "governed_decisions_per_month": 50, "workspaces_service_wide_per_day": 0 }, "claim": {}, "next": {}}Recover the current identity of an Accounts-owned enrollment POST
Default off. Accounts authorizes the current owner/admin of the exact existing Commerce workspace and signs a command. Core checks current Accounts JWKS and the SYNCED human workspace projection; no org, membership, merchant ADMIN key or Marketplace purchase is created. A command lease lasts at most 30 seconds, with at most 5 seconds future clock skew. JSON only; no query, Origin or Cookie. command_id has immutable semantic content; retries may refresh only issued_at and authorization_expires_at. No route executes a commerce or payment transaction. Requires current workspace owner/admin and exact retained enrollment_id, without an old Microsoft proof or known connection ID. Recovers pending, active or revoked records. Historical provider observation time/guard flags never become fresh evidence. read_granted is computed from current persisted enrollment/grant and managed assignment eligibility; unavailable assignment authority reports false. No permission is created or renewed.
Start claiming a provisional workspace (email OTP) POST
First half of attaching a human owner to an anonymously minted workspace. Org-key authed — holding the workspace's key is the possession proof that decides who may attach an owner. The org must be provisional and unclaimed. Emails a six-digit OTP with a 5-minute expiry to owner_email; 10 requests per minute.