Agined est en bêta restreinte. Lors de l’inscription ou de la connexion, vous devez saisir le mot de passe de bêta-testeur que vous avez reçu ou en demander un à preview@agined.com. Merci.

Agentic API · single registry · ten transports

One registry. Every agent.

295 actions across 23 L5 domains. One Zod 4 source-of-truth registry generates every transport — REST, MCP, ChatGPT Apps, Gemini, Perplexity, Claude Cowork, A2A, NLWeb, Claude SKILLs — byte-identically, on every contracts version bump. W3C DID Web agent identities, SPIFFE workload identity, AP2 Verifiable Credential mandates, MCP Apps confirmation iframes, C2PA 2.1 content provenance. The same security posture as the dashboard, against the same hash-chained audit log.

OpenAPI 3.1 spec → AGENTS.md →

MCP tool list → · A2A discovery →

295

Chargement…

The stack

L1 to L6

Six layers, one source.

Every Agined action is defined once in the contracts registry (L5) and the codegen pipeline (L4) emits every transport's wire format byte-identically. The Worker (L3) implements each action once; the gateway middleware (L2) enforces auth + idempotency + rate-limit + confirmation + mandate + audit across all transports. Customer surfaces (L1) — the dashboard, AI chats, partner agents — never re-derive contracts.

1L1 · Customer surfaces
Dashboard→Number One→partner agents→MCP / ChatGPT Apps / Gemini / Claude Cowork / A2A / NLWeb / SKILLs / REST
2L2 · Gateway middleware
15 steps→CORS→site-gate→replay-defense→auth→workspace-ctx→idempotency→rate-limit→kill-switch→permission→mandate→confirmation→handler dispatch→audit→Tops→response
3L3 · Per-domain handlers
One handler per L5 action→pure modules→take RequestContext + parsed input→return result OR error
4L4 · Codegen pipeline
Walks L5 once, emits OpenAPI 3.1→MCP→ChatGPT Apps→Gemini→Perplexity→Claude Cowork→A2A→AsyncAPI→NLWeb→SKILLs→AGENTS.md
5L5 · Action Registry (contracts)
Zod 4→z.toJSONSchema()→295 actions × 23 domains→every transport derived from here→@agined/contracts
6L6 · Identity · audit · crypto primitives
W3C DID Web→SPIFFE→AP2 mandates→MCP Apps confirmation tokens→C2PA→OpenTimestamps→DPoP→intent claims→hash-chained audit log

REQUEST · DESCEND

Layer · L1

Customer surfaces

Dashboard, Number One AI chat, embedded customer apps, partner agents reaching the gateway via OAuth or A2A or workload SVID.

Layer · L2

Gateway middleware

15-step middleware chain: CORS → site-gate → replay-defense → auth → workspace-context → idempotency → rate-limit → kill-switch → permission → mandate → confirmation → handler dispatch → audit envelope → Tops feed → response shaping.

Layer · L3

Per-domain handlers

One handler per L5 action. Pure modules: take RequestContext + parsed input, return result OR error. No global state.

Layer · L4

Codegen pipeline

Walks the L5 registry once, emits OpenAPI 3.1 · MCP tool list · ChatGPT Apps manifest · Gemini Extension · Perplexity Connector · Claude Cowork capability · A2A capability card · AsyncAPI 3 · NLWeb · Claude SKILLs · AGENTS.md.

Layer · L5

Action Registry (contracts)

Zod 4 schemas defined once with z.toJSONSchema(). 295 actions across 23 domains. Every transport's wire format derived from here.

Layer · L6

Identity + audit + cryptography primitives

W3C DID Web · SPIFFE · AP2 mandates · MCP Apps confirmation tokens · C2PA · OpenTimestamps · DPoP (RFC 9449) · intent claims · hash-chained audit log.

Reference-grade primitives

Built on published specifications.

We never invent crypto. Every primitive here is W3C, IETF, SPIFFE, AP2, MCP, C2PA. The contracts repo cites every spec by section + RFC + version so partner integrations don't need to re-negotiate the wire format. The wiring docs map each spec to a deployment-ready Worker implementation.

W3C DID Web Method

Every agent on the platform has its own decentralized identity.

did:web:agined.com:agents:<id> for every enrolled agent.
Ed25519 (default) or ES256 signing keys. Customer-rotatable + customer-revocable.
Per-DID rotation history forms a hash chain. JCS-canonicalised (RFC 8785).
Universal resolver accepts did:web, did:key, did:peer for partner federations.

W3C DID Core 1.0 · DID Web Method 0.2 · JWK RFC 7517+7638

Documentation →

SPIFFE Workload Identity

Workloads attest themselves to the gateway — not just users.

spiffe.agined.com trust domain + X.509-SVID + JWT-SVID exchange.
DPoP-bound short-lived (5-minute) Agined sessions issued on workload-attest.
Workspace-scoped federation against partner trust domains.
Trust-bundle SHA-256 pinning + drift detection.

SPIFFE 1.0 · X.509-SVID · JWT-SVID · Trust Domain + Bundle + Federation

Documentation →

AP2 Verifiable Credential Mandates

Standing authorisation for agent-led billing — with cryptographic enforcement.

W3C VC Data Model 2.0 + SD-JWT VC (IETF). Selective-disclosure presentations.
Spend + invocation + per-hour + per-action limits enforced at every gateway call.
Conditions: IP CIDR allow-list, required DPoP key thumbprint, step-up factor.
BitstringStatusListCredential at /.well-known/mandates/status-list.json; 5-min refresh.

W3C VC Data Model 2.0 · SD-JWT VC · Data Integrity 1.0 · AP2 baseline

Documentation →

MCP Apps confirmation tokens

Single-use, audience-restricted, bound to one action.

A UI session token is minted per confirmation: `aud: ["https://ui.agined.com"]`, one action, one use.
The proxy lane checks three bindings before forwarding — the confirmation origin, the `mcp-apps@1` protocol version, and the host-issued nonce echoed back.
Consume-once is an atomic ledger write, so a replayed token is refused rather than re-executed.
The rich modal surface itself is not live: the iframe bundle is unwritten and the ui.agined.com zone is not provisioned.

MCP Specification 2026-07-28 · `mcp-apps@1` (Agined’s own bridge protocol, not the io.modelcontextprotocol/ui extension)

Documentation →

C2PA 2.1 Content Credentials

Agined receipts paired with ecosystem-standard provenance manifests.

Every attestor.attest.content receipt pairs with a C2PA 2.1 manifest.
COSE_Sign1 over RFC-8949-canonical CBOR (EdDSA default, ES256 for FIPS deploys).
RFC 3161 timestamp-authority countersignature (opt-in; configure your own TSA).
AI-generated content disclosure can be auto-injected into the manifest.

C2PA 2.1 · COSE_Sign1 (RFC 8152 + RFC 9052) · RFC 8949 CBOR · RFC 3161 TSP

Documentation →

Try it

One action. Every safeguard, no extra code.

Here's the canonical "agent makes a billing-impacting call with an AP2 mandate" flow. The same shape works from REST, MCP, ChatGPT Apps, A2A — only the transport changes. The gateway middleware enforces auth + workspace context + idempotency + rate-limit + kill-switch + permission + mandate + confirmation, and writes the audit envelope.

1 · Issue a mandate (one-time, via dashboard or API)

curl -X POST https://api.agined.com/api/v1/agents/mandate/issue \
  -H "Authorization: Bearer av_pat_…" \
  -H "DPoP: <RFC-9449 proof>" \
  -H "Agined-Workspace-Id: ws_demo_default" \
  -H "X-Idempotency-Key: $(uuidgen)" \
  -H "X-Agined-Confirmation: conf_…" \
  -d '{
    "label": "Stripe refund bot — Q3 budget",
    "agentDid": "did:web:agined.com:agents:refund-bot",
    "allowedActionIds": ["billing.refund.issue"],
    "maxSafetyLevel": "billing_impacting",
    "workspaceIds": ["ws_demo_default"],
    "maxSpendUsdFractional": 50000,
    "maxInvocations": 200,
    "validForDays": 30
  }'

import httpx, uuid

response = httpx.post(
    "https://api.agined.com/api/v1/agents/mandate/issue",
    headers={
        "Authorization": "Bearer av_pat_…",
        "DPoP": "<RFC-9449 proof>",
        "Agined-Workspace-Id": "ws_demo_default",
        "X-Idempotency-Key": str(uuid.uuid4()),
        "X-Agined-Confirmation": "conf_…",
    },
    json={
        "label": "Stripe refund bot — Q3 budget",
        "agentDid": "did:web:agined.com:agents:refund-bot",
        "allowedActionIds": ["billing.refund.issue"],
        "maxSafetyLevel": "billing_impacting",
        "workspaceIds": ["ws_demo_default"],
        "maxSpendUsdFractional": 50000,
        "maxInvocations": 200,
        "validForDays": 30,
    },
)
mandate = response.json()

import { randomUUID } from "node:crypto";

const response = await fetch(
  "https://api.agined.com/api/v1/agents/mandate/issue",
  {
    method: "POST",
    headers: {
      "Authorization": "Bearer av_pat_…",
      "DPoP": "<RFC-9449 proof>",
      "Agined-Workspace-Id": "ws_demo_default",
      "X-Idempotency-Key": randomUUID(),
      "X-Agined-Confirmation": "conf_…",
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      label: "Stripe refund bot — Q3 budget",
      agentDid: "did:web:agined.com:agents:refund-bot",
      allowedActionIds: ["billing.refund.issue"],
      maxSafetyLevel: "billing_impacting",
      workspaceIds: ["ws_demo_default"],
      maxSpendUsdFractional: 50000,
      maxInvocations: 200,
      validForDays: 30,
    }),
  },
);
const mandate = await response.json();

req, _ := http.NewRequest("POST",
    "https://api.agined.com/api/v1/agents/mandate/issue",
    bytes.NewReader([]byte(`{
        "label": "Stripe refund bot — Q3 budget",
        "agentDid": "did:web:agined.com:agents:refund-bot",
        "allowedActionIds": ["billing.refund.issue"],
        "maxSafetyLevel": "billing_impacting",
        "workspaceIds": ["ws_demo_default"],
        "maxSpendUsdFractional": 50000,
        "maxInvocations": 200,
        "validForDays": 30
    }`)))
req.Header.Set("Authorization", "Bearer av_pat_…")
req.Header.Set("DPoP", "<RFC-9449 proof>")
req.Header.Set("Agined-Workspace-Id", "ws_demo_default")
req.Header.Set("X-Idempotency-Key", uuid.NewString())
req.Header.Set("X-Agined-Confirmation", "conf_…")
req.Header.Set("Content-Type", "application/json")
resp, _ := http.DefaultClient.Do(req)
defer resp.Body.Close()

2 · Agent invokes the action (mandate-gated)

curl -X POST https://api.agined.com/api/v1/billing/refund/issue \
  -H "Authorization: Bearer <agent-session-jwt>" \
  -H "DPoP: <RFC-9449 proof>" \
  -H "X-Mandate-Presentation: <base64url SD-JWT VC>" \
  -H "X-Mandate-Audience: https://api.agined.com" \
  -H "X-Mandate-Nonce: <gateway-issued>" \
  -H "Agined-Workspace-Id: ws_demo_default" \
  -H "X-Idempotency-Key: $(uuidgen)" \
  -d '{
    "chargeId": "ch_3Pj…",
    "amountFractional": 14500,
    "reason": "Customer requested partial refund"
  }'

import httpx, uuid

response = httpx.post(
    "https://api.agined.com/api/v1/billing/refund/issue",
    headers={
        "Authorization": "Bearer <agent-session-jwt>",
        "DPoP": "<RFC-9449 proof>",
        "X-Mandate-Presentation": "<base64url SD-JWT VC>",
        "X-Mandate-Audience": "https://api.agined.com",
        "X-Mandate-Nonce": "<gateway-issued>",
        "Agined-Workspace-Id": "ws_demo_default",
        "X-Idempotency-Key": str(uuid.uuid4()),
    },
    json={
        "chargeId": "ch_3Pj…",
        "amountFractional": 14500,
        "reason": "Customer requested partial refund",
    },
)

import { randomUUID } from "node:crypto";

const response = await fetch(
  "https://api.agined.com/api/v1/billing/refund/issue",
  {
    method: "POST",
    headers: {
      "Authorization": "Bearer <agent-session-jwt>",
      "DPoP": "<RFC-9449 proof>",
      "X-Mandate-Presentation": "<base64url SD-JWT VC>",
      "X-Mandate-Audience": "https://api.agined.com",
      "X-Mandate-Nonce": "<gateway-issued>",
      "Agined-Workspace-Id": "ws_demo_default",
      "X-Idempotency-Key": randomUUID(),
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      chargeId: "ch_3Pj…",
      amountFractional: 14500,
      reason: "Customer requested partial refund",
    }),
  },
);

req, _ := http.NewRequest("POST",
    "https://api.agined.com/api/v1/billing/refund/issue",
    bytes.NewReader([]byte(`{
        "chargeId": "ch_3Pj…",
        "amountFractional": 14500,
        "reason": "Customer requested partial refund"
    }`)))
req.Header.Set("Authorization", "Bearer <agent-session-jwt>")
req.Header.Set("DPoP", "<RFC-9449 proof>")
req.Header.Set("X-Mandate-Presentation", "<base64url SD-JWT VC>")
req.Header.Set("X-Mandate-Audience", "https://api.agined.com")
req.Header.Set("X-Mandate-Nonce", "<gateway-issued>")
req.Header.Set("Agined-Workspace-Id", "ws_demo_default")
req.Header.Set("X-Idempotency-Key", uuid.NewString())
resp, _ := http.DefaultClient.Do(req)
defer resp.Body.Close()

3 · Same call, from MCP (Claude Cowork)

// MCP client calls the gateway through mcp.a2pi.app/mcp
// Tool name mirrors the action id; the host attaches the mandate
// presentation as the "x-agined-mandate" annotation.
{
  "name": "billing.refund.issue",
  "arguments": {
    "chargeId": "ch_3Pj…",
    "amountFractional": 14500,
    "reason": "Customer requested partial refund"
  },
  "_meta": {
    "x-agined-mandate": "<base64url SD-JWT VC>"
  }
}

from mcp.client import Client

client = await Client.connect("https://mcp.a2pi.app/mcp",
                              bearer="<agent-session-jwt>")
result = await client.call_tool(
    "billing.refund.issue",
    arguments={
        "chargeId": "ch_3Pj…",
        "amountFractional": 14500,
        "reason": "Customer requested partial refund",
    },
    meta={"x-agined-mandate": "<base64url SD-JWT VC>"},
)

import { Client } from "@modelcontextprotocol/sdk/client/index.js";

const client = new Client({ name: "agent", version: "1" });
await client.connect("https://mcp.a2pi.app/mcp", {
  bearer: "<agent-session-jwt>",
});
const result = await client.callTool({
  name: "billing.refund.issue",
  arguments: {
    chargeId: "ch_3Pj…",
    amountFractional: 14500,
    reason: "Customer requested partial refund",
  },
  _meta: { "x-agined-mandate": "<base64url SD-JWT VC>" },
});

4 · Same call, from A2A (partner gateway)

// Partner agent presents an A2A claim against
// did:web:agined.com:agents:gateway.
// Worker validates the mandate VC's issuer DID is trusted by
// our workspace, the cross-signature is valid, the action is
// in actionScope.allowedActionIds, and the spend is under
// limits.maxSpend.
{
  "@context": ["https://a2a.org/v1"],
  "from": "did:web:partner.example.com:agents:billing-bot-12",
  "to":   "did:web:agined.com:agents:gateway",
  "actionId": "billing.refund.issue",
  "params":   { /* ... */ },
  "mandate":  "<base64url SD-JWT VC>"
}

import httpx, json

claim = {
    "@context": ["https://a2a.org/v1"],
    "from": "did:web:partner.example.com:agents:billing-bot-12",
    "to":   "did:web:agined.com:agents:gateway",
    "actionId": "billing.refund.issue",
    "params":   { "chargeId": "ch_3Pj…", "amountFractional": 14500 },
    "mandate":  "<base64url SD-JWT VC>",
}
signed = sign_a2a_claim(claim, partner_signing_key)
httpx.post(
    "https://api.agined.com/api/a2a/dispatch",
    json=signed,
    headers={"Content-Type": "application/a2a+json"},
)

Légal

CGU
Vie privée
Droit de rétractation
Mentions
RGPD & opposition
Do not sell / share
Signaler abus
Avis sur les marques
Les surfaces Agined fonctionnent avec ces modèles, plateformes et agents IA via MCP, REST et A2A. Leurs noms et logos ne servent qu’à le dire. Cela ne signifie pas que l’une de ces sociétés cautionne, parraine ou s’associe à Agined.
- Les noms et logos de Amazon Bedrock et Bedrock AgentCore sont des marques ou des marques déposées de Amazon.com, Inc. or its affiliates.
- Les noms et logos de Anthropic, Claude Code et Claude Agent SDK sont des marques ou des marques déposées de Anthropic, PBC.
- Les noms et logos de Azure AI Foundry, Microsoft Copilot Studio et Microsoft Agent Framework sont des marques ou des marques déposées de Microsoft Corporation.
- Les noms et logos de Cline sont des marques ou des marques déposées de Cline Bot Inc.
- Les noms et logos de Cohere sont des marques ou des marques déposées de Cohere Inc.
- Les noms et logos de CrewAI sont des marques ou des marques déposées de CrewAI, Inc.
- Les noms et logos de Cursor sont des marques ou des marques déposées de Anysphere, Inc.
- Les noms et logos de DeepSeek sont des marques ou des marques déposées de DeepSeek.
- Les noms et logos de Devin sont des marques ou des marques déposées de Cognition AI, Inc.
- Les noms et logos de GitHub Copilot sont des marques ou des marques déposées de GitHub, Inc.
- Les noms et logos de Google Gemini, Vertex AI, Gemini Enterprise, Google ADK et Gemini CLI sont des marques ou des marques déposées de Google LLC.
- Les noms et logos de Hugging Face sont des marques ou des marques déposées de Hugging Face, Inc.
- Les noms et logos de IBM watsonx Orchestrate sont des marques ou des marques déposées de International Business Machines Corporation.
- Les noms et logos de Intercom Fin sont des marques ou des marques déposées de Intercom, Inc.
- Les noms et logos de LangChain sont des marques ou des marques déposées de LangChain, Inc.
- Les noms et logos de LlamaIndex sont des marques ou des marques déposées de LlamaIndex, Inc.
- Les noms et logos de Manus sont des marques ou des marques déposées de Manus AI.
- Les noms et logos de Mastra sont des marques ou des marques déposées de Mastra.
- Les noms et logos de Meta Llama sont des marques ou des marques déposées de Meta Platforms, Inc.
- Les noms et logos de Mistral AI sont des marques ou des marques déposées de Mistral AI.
- Les noms et logos de Model Context Protocol et Agent2Agent sont des marques ou des marques déposées de The Linux Foundation.
- Les noms et logos de n8n sont des marques ou des marques déposées de n8n GmbH.
- Les noms et logos de Ollama sont des marques ou des marques déposées de Ollama.
- Les noms et logos de OpenAI, OpenAI Codex, ChatGPT agent et OpenAI Agents SDK sont des marques ou des marques déposées de OpenAI.
- Les noms et logos de OpenClaw sont des marques ou des marques déposées de the OpenClaw project.
- Les noms et logos de OpenRouter sont des marques ou des marques déposées de OpenRouter, Inc.
- Les noms et logos de Perplexity et Perplexity Comet sont des marques ou des marques déposées de Perplexity AI, Inc.
- Les noms et logos de Pydantic AI sont des marques ou des marques déposées de Pydantic Services Inc.
- Les noms et logos de Qwen sont des marques ou des marques déposées de Alibaba Cloud.
- Les noms et logos de Replit Agent sont des marques ou des marques déposées de Replit, Inc.
- Les noms et logos de Salesforce Agentforce sont des marques ou des marques déposées de Salesforce, Inc.
- Les noms et logos de SAP Joule sont des marques ou des marques déposées de SAP SE.
- Les noms et logos de ServiceNow AI Agents sont des marques ou des marques déposées de ServiceNow, Inc.
- Les noms et logos de UiPath sont des marques ou des marques déposées de UiPath, Inc.
- Les noms et logos de Vercel AI SDK sont des marques ou des marques déposées de Vercel, Inc.
- Les noms et logos de xAI Grok sont des marques ou des marques déposées de xAI.
Les autres marques, noms de produits et logos appartiennent à leurs détenteurs respectifs.
Logos issus de LobeHub Icons (licence MIT) et de Simple Icons (CC0). Les logos de Salesforce Agentforce, ServiceNow et Agent2Agent sont ceux que publient leurs titulaires. Les licences couvrent les fichiers graphiques, pas les marques qu’ils montrent.
Tous les documents juridiques

One registry. Every agent.

One registry. Every agent.

Six layers, one source.

Customer surfaces

Gateway middleware

Per-domain handlers

Codegen pipeline

Action Registry (contracts)

Identity + audit + cryptography primitives

23 L5 domains. Every action declared once.

account

org

workspace

billing

keys

webhooks

alerts

exports

retention

audit

tops

referrals

number_one

attestor

privacy

support

discovery

agents

starfleet

fabric

actionflow

ledger-bundles

witness

Reach Agined from anywhere.

REST

MCP

MCP Apps

ChatGPT Apps

Gemini Extensions

Perplexity

Claude Cowork

A2A (Agent-to-Agent)

NLWeb

Claude SKILLs

Built on published specifications.

W3C DID Web Method

SPIFFE Workload Identity

AP2 Verifiable Credential Mandates

MCP Apps confirmation tokens

C2PA 2.1 Content Credentials

Four ways in. All workspace-scoped.

av_pat_*

OAuth + DPoP

DID Web + JWT-VC

Ingest tokens

One action. Every safeguard, no extra code.

47 well-known files. No login required.

OpenAPI 3.1 spec

AGENTS.md catalogue

MCP server card

MCP tool list

A2A discovery (per-tenant cards)

AGENTS.json (machine-readable)

Org-level DID document

JWKS (signing keys)

SPIFFE trust bundle

AP2 mandate revocation

Trusted A2A roots

ChatGPT Apps manifest

Gemini Extension manifest

Perplexity Connector v1

Claude Cowork capability

AsyncAPI 3.0 spec

NLWeb manifest

OIDC discovery

Approved fraud providers

Sub-processor inventory

Customer-first access paths

Every call. Hash-chained. Anchored.

Hash chain

`av_pat_*`