🛡️ AgentShield API

Privacy-First Trust Infrastructure for AI Agents

🔒 Developer Transparency

This API exclusively manages public certificate data. No sensitive agent information, prompts, or code is ever transmitted to our servers. All security tests run locally in your environment.

Base URL (via Frontend Proxy)

https://agentshield.live/api/

→ Proxied to: https://Heroku backend (proxied)/api/

⚠️ Infrastructure Notice

Current: API proxied through Heroku backend (dev environment)

Roadmap: Dedicated infrastructure coming Q2 2026

When we migrate, only the backend changes — these URLs remain stable.

Public Endpoints

GET /registry/agents

Browse all certified agents in the public trust registry.

Parameter	Type	Description
limit	integer	Results per page (default: 10, max: 100)
offset	integer	Page offset (default: 0)
tier	string	Filter by tier: unverified, basic, verified, trusted

▶️ Try It

GET /registry/search

Search agents by name or certificate ID.

Parameter	Type	Description
q	string	Search query (required)

▶️ Try It

GET /verify/:agent_id

Verify an agent's certificate status and trust score.

Parameter	Type	Description
agent_id	string	Agent's certificate ID (required)

▶️ Try It

GET /crl/check/:cert_id

Check if a certificate has been revoked.

Parameter	Type	Description
cert_id	string	Certificate ID to check (required)

▶️ Try It

Response Codes

Code	Meaning
200 OK	Request successful
404 Not Found	Agent or certificate not found
500 Server Error	Backend issue (check Heroku status)

Example Response

{
  "agent_id": "agent_trustbot_alpha",
  "certificate_id": "cert_ed25519_abc123",
  "trust_score": 85,
  "tier": "TRUSTED",
  "status": "active",
  "issued_at": "2026-02-25T14:30:00Z",
  "expires_at": "2026-05-26T14:30:00Z",
  "verification_count": 12,
  "public_key_fingerprint": "SHA256:abc123...xyz789"
}

💡 Privacy Notice

All data returned by this API is already public (certificate registry). No private agent data is ever accessible.