{"schema_version":"certifieddata.agents-surface.v1","canonical":"https://certifieddata.io/agents","description":"Machine-readable summary of the CertifiedData /agents surface: pillars, MCP scope, discovery endpoints, and live public counts. For the full platform capability card see /.well-known/agent.json.","pillars":{"datasets":{"href":"https://certifieddata.io/agents/datasets","public_endpoint":"POST /api/synth/public/generate","cert_level":"sandbox.cert.v1"},"decision_ledger":{"href":"https://certifieddata.io/agents/decision-ledger","public_endpoint":"POST /api/demo/decision","production_endpoint":"POST /v1/decisions","cert_level":"Ed25519-signed · append-only"},"commerce":{"href":"https://certifieddata.io/agents/commerce","sandbox_key_quota":"3 keys / 24h","cert_level":"Ed25519-signed receipts"}},"quickstart":{"generate":{"method":"POST","url":"https://certifieddata.io/api/synth/public/generate","auth":"none (sandbox)"},"verify":{"method":"POST","url":"https://certifieddata.io/api/verify","auth":"none"}},"mcp":{"href":"https://certifieddata.io/agents/mcp","transport":"stdio","scope":["commerce","receipts","identity","licensing"],"tools":{"commerce":["browse_marketplace","check_spend_policy","check_remaining_budget","authorize_purchase","execute_purchase"],"receipts":["verify_receipt"],"identity":["get_agent_identity","verify_agent_attestation"],"licensing":["get_license","rotate_license_token"]},"tools_total":10,"not_yet_exposed":["dataset_generation (available via HTTP + SDK)","decision_logging (available via HTTP + SDK)"]},"public_evidence_surfaces":{"certificate_transparency_log":{"ui":"https://certifieddata.io/transparency/certificates","api":"https://certifieddata.io/api/log","total":0,"properties":["append-only","hash-chained"]},"artifact_registry":{"ui":"https://certifieddata.io/registry","api":"https://certifieddata.io/v1/registry","counts_api":"https://certifieddata.io/v1/registry/counts","total":0,"properties":["public","machine-readable"]},"decision_log":{"ui":"https://certifieddata.io/decision-log","api":"https://certifieddata.io/api/decision-log","total":0,"properties":["Ed25519-signed","chain-linked","public_mode=true only"]}},"latest_certificate":null,"discovery":{"agent_card":"https://certifieddata.io/.well-known/agent.json","ai_plugin":"https://certifieddata.io/.well-known/ai-plugin.json","signing_keys":"https://certifieddata.io/.well-known/signing-keys.json","decision_signing_keys":"https://certifieddata.io/.well-known/decision-signing-keys.json","openapi":"https://certifieddata.io/openapi.json","llms_txt":"https://certifieddata.io/llms.txt"},"rate_limits":{"documentation":"https://certifieddata.io/agents/rate-limits","introspection_endpoint":"https://certifieddata.io/api/agents/me/quota","headers":["RateLimit-Limit","RateLimit-Remaining","RateLimit-Reset","Retry-After","RateLimit-Lane","X-RateLimit-Limit","X-RateLimit-Remaining","X-RateLimit-Reset","X-RateLimit-Lane"],"header_format":"IETF draft-ietf-httpapi-ratelimit-headers; X-RateLimit-* mirrored for legacy clients; RateLimit-Lane + X-RateLimit-Lane stamped by this platform.","lanes_available":["anonymous","agent","authenticated"],"lane_precedence":"authenticated > agent > anonymous","agent_did":{"header":"X-Agent-DID","format":"did:cd:agent:<id>","rotation_cap":"10 distinct DIDs / IP / hour (configurable via AGENT_DID_PER_IP_MAX; set to 0 to disable the agent lane entirely)","security_note":"X-Agent-DID is a self-asserted quota identity hint. It is NOT authentication. It does NOT grant: (1) production certificate issuance, (2) registry writes or marketplace publishing, (3) live commerce on cdp_live_* keys, or (4) agent identity / DID registration under /api/agents/:id/identity. Sandbox capability scope is identical to the anonymous lane — only the quota bucket differs."},"consumes_quota_on_introspection":false,"storage_note":"Rate-limit counters are per-instance in-memory Maps today. Before horizontal scale-out, migrate to rate-limit-redis + Redis/Upstash so the DID rotation cap, sandbox global fleet cap, and per-key buckets aggregate across replicas."},"sub_pages":["/agents/datasets","/agents/decision-ledger","/agents/commerce","/agents/workflows","/agents/verify","/agents/safety","/agents/sdk","/agents/mcp","/agents/errors","/agents/rate-limits","/agents/changelog"],"changelog":{"human":"https://certifieddata.io/agents/changelog","machine":"https://certifieddata.io/agents/changelog.json"},"cryptography":{"hash":"SHA-256","signature":"Ed25519","canonicalization":"RFC 8785 (JCS)"},"generated_at":"2026-05-31T18:12:20.543Z"}