The suite

Primitives

61 primitives. One catalogue.
One chain anyone can check.

Each primitive works on the same catalogue, the same gate and the same chain. Turn on what a surface needs – the rest stays out of the call path.

Your API as MCP, REST and A2A, from one catalogue.

PRIMITIVE 01 / SURFACE.MCP

Hosted MCP server

Publish a catalogue and Agined serves it as an MCP server on your surface host. Agents list your actions as tools and call them; every call passes the same gate as REST and lands on your chain as one record.

What gets recordedaction id, actor, the policy decision, outcome, status, the request body hash, and the moment of the call on your chain

gated like every REST callStreamable HTTP8 MCP methods

Explore surface.mcp Read the surface.mcp docs

superfly.a2pi.app/mcpPOST

POST /mcp
Authorization: DPoP ••••••••
DPoP: eyJ0eXAiOiJkcG9wK2p3dCJ9…
Content-Type: application/json

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": { "name": "orders.create", "arguments": { "sku": "widget" } }
}

→ 200 { result }

PRIMITIVE 02 / SHADOW.IMPORT

Instant Surface import

Point Agined at real traffic – a HAR file, gateway logs, OTel spans or your agents' own tool calls. It drafts the actions it observed, with input and output schemas and a suggested risk class for each. Nothing is adopted until a person picks it.

What gets recordedevery observed operation, its inferred schemas, the suggested risk class, and whether it was adopted

6 log formatsOTel spans and HAR filesadopts nothing by itself

Explore shadow.import Read the shadow.import docs

api.agined.com/api/workspaces/agn-ws_••••/catalog/shadow/import?format=harPOST

POST /api/workspaces/agn-ws_••••/catalog/shadow/import?format=har
Authorization: Bearer ••••••••

→ 200 { observations }, the HAR file is the body

PRIMITIVE 16 / OPENAPI.IMPORT

OpenAPI catalogue import

Upload an OpenAPI 3 document and Agined drafts one action per operation, with input and output schemas taken from the spec and a risk class suggested from the verb. Mutations start higher than reads. You review every draft before anything is published, and an operation it cannot read is listed as skipped.

What gets recordedeach drafted action with its input and output schemas and its suggested risk class, every operation it skipped, with the reason it was skipped, and the catalogue version you later published

one draft per callschemas taken from the specskipped ones listed

Explore openapi.import Read the openapi.import docs

api.agined.com/api/workspaces/agn-ws_••••/catalog/importPOST

POST /api/workspaces/agn-ws_••••/catalog/import
Authorization: Bearer ••••••••
Content-Type: application/json

{
  "document": { "openapi": "3.1.0", "paths": { … } }
}

→ 200 { drafted, skipped }

PRIMITIVE 17 / ASYNCAPI.IMPORT

AsyncAPI catalogue import

Upload an AsyncAPI document and Agined drafts actions for the operations an agent may trigger, with the message schemas as their input. Event surfaces get the same catalogue, policy and receipts as request and response APIs. Drafts stay drafts until you publish them with a diff a person has reviewed.

What gets recordedeach drafted action with its message schema, the channel it came from, the suggested risk class, every operation it skipped and why, and the catalogue version you later published it in

event-driven surfaces toomessage schemasreviewed by a person

Explore asyncapi.import Read the asyncapi.import docs

api.agined.com/api/workspaces/agn-ws_••••/catalog/importPOST

POST /api/workspaces/agn-ws_••••/catalog/import
Authorization: Bearer ••••••••
Content-Type: application/json

{
  "document": { "asyncapi": "3.0.0", "operations": { … } }
}

→ 200 { drafted, skipped }

PRIMITIVE 18 / REGISTRY.PUBLISH

Signed registry publish

Publishing turns the catalogue into a versioned registry signed with Agined's Ed25519 key, and the gateway loads only a registry that verifies. Every earlier version is kept and can be restored to your draft. A registry that fails to load or to verify closes your surface; it never opens it by default.

What gets recordedregistry version, tenant, signing slot, the issue time, and each action with its schema, risk class, meter and scopes

a2pireg1 signed formatevery version restorablefails closed always

Explore registry.publish Read the registry.publish docs

api.agined.com/api/workspaces/agn-ws_••••/catalog/publishPOST

POST /api/workspaces/agn-ws_••••/catalog/publish
Authorization: Bearer ••••••••

→ 200 { version, ref, distributed }

PRIMITIVE 19 / SURFACE.REST

Agent REST surface per host

Agents call each published action at its own HTTPS path on your surface host. The request runs through scope, policy, mandate, access mode, limits and approval before your backend sees it. A call that ran carries a proof link, and a refusal names the exact gate that stopped it.

What gets recordedaction id, request id, actor, outcome and status, which gate refused it if one did, the request body hash, and the call's place on your chain

17 ordered gatestyped refusal per gateMCP / A2A

Explore surface.rest Read the surface.rest docs

superfly.a2pi.app/api/v1/actions/orders.getPOST

POST /api/v1/actions/orders.get
agined-consumer-key: ••••••••
Content-Type: application/json

{
  "orderId": "ord_1042"
}

→ 200 { data }  agined-proof: /verify?call=…

PRIMITIVE 20 / SURFACE.A2A

A2A agent endpoint

Agined publishes an A2A agent card for your surface and answers A2A JSON-RPC at /a2a, so agents built on the Agent2Agent protocol can send your surface a task. Each task runs one action through the same gate as REST and MCP. Paid actions cannot be paid for over A2A.

What gets recordedthe card's endpoint, the skills from your catalogue, and for each task the action, actor, decision and outcome

AgentCard 0.3.0message/sendtasks/get only

Explore surface.a2a Read the surface.a2a docs

superfly.a2pi.app/a2aPOST

POST /a2a
Authorization: DPoP ••••••••
DPoP: eyJ0eXAiOiJkcG9wK2p3dCJ9…
Content-Type: application/json

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "message/send",
  "params": { "message": { "role": "user", "parts": […] } }
}

→ 200 { result: task }

PRIMITIVE 21 / SURFACE.OAUTH

Agent OAuth and registration

Each surface runs its own OAuth authorization server. An agent registers itself with dynamic client registration, gets a client-credentials token, and can bind it to its key with DPoP, so a stolen bound token is useless without the key. Your users never hand an agent a password, and you never issue credentials by hand. Scopes come from your catalogue.

What gets recordedthe client id and name, its registration time, its auth method and its granted scopes, all kept with the client's registration record

dynamic registrationDPoP-bound tokensscopes from catalogue

Explore surface.oauth Read the surface.oauth docs

superfly.a2pi.app/oauth/registerPOST

POST /oauth/register
Content-Type: application/json

{
  "client_name": "Superfly Agent",
  "grant_types": ["client_credentials"]
}

→ 201 { client_id, client_secret }

PRIMITIVE 22 / WELLKNOWN.PUBLISH

Agent discovery documents

Agined serves the documents agents look for first: OAuth metadata, JWKS, did.json, an agent card, mcp.json, openapi.json, AGENTS.md and llms.txt. Seven are computed on request and seven come from each publish, so they follow the live catalogue.

What gets recordedall 14 well-known documents, the catalogue version they describe, and the hash of each document emitted at the moment of publish

14 docsdid.json for each surfacellms.txt too

Explore wellknown.publish Read the wellknown.publish docs

superfly.a2pi.app/.well-known/agent-card.jsonGET

GET /.well-known/agent-card.json

→ 200 { name, url, skills }

PRIMITIVE 23 / ARTIFACTS.EMIT

Eleven formats per publish

One publish emits your catalogue in eleven formats: OpenAPI, MCP, ChatGPT Apps, Gemini, Perplexity, Claude, Claude Skills, A2A, AsyncAPI, NLWeb and AGENTS.md. Each set is content-addressed and goes live whole, and a publish reports a set that failed.

What gets recordedeach format's file and its hash, the catalogue version it was built from, and the exact moment the whole set went live

11 formats per publishcontent-addressedone set per publish

Explore artifacts.emit Read the artifacts.emit docs

superfly.a2pi.app/.artifacts/openapi.jsonGET

GET /.artifacts/openapi.json

→ 200 OpenAPI 3.1, same version as /mcp

PRIMITIVE 24 / PORTAL.HOST

Portal, changelog and status

Your surface host also serves a portal for the people behind the agents: quickstarts in curl, TypeScript, Python and MCP, a changelog with feeds, and a status page. All of it is built from the published catalogue, so it never describes an action you have removed or renamed.

What gets recordedthe catalogue version each page describes, every changelog entry with its date, and each published action's status, worked out live

4 guidesAtom and JSON feedsa status page each

Explore portal.host Read the portal.host docs

superfly.a2pi.app/changelog.jsonGET

GET /changelog.json

→ 200 { entries }

PRIMITIVE 25 / EGRESS.SIGN

Signed calls to your backend

Agined calls your backend with an RFC 9421 HTTP signature and an RFC 9530 content digest, so your server can check that each request came from your gateway and was not changed on the way. Every hop is checked against private addresses. Only side-effect-free calls are retried, up to three times.

What gets recordedthe execution path, the contract, any handler note, the call's duration and your backend's status

RFC 9421 signaturesSSRF check per hopsafe retries

Explore egress.sign Read the egress.sign docs

superfly.a2pi.app/.well-known/agined-egress-jwks.jsonGET

GET /.well-known/agined-egress-jwks.json

→ 200 { keys: [{ kid: "agined-egress-1" }] }

PRIMITIVE 26 / HOSTNAME.CUSTOM

Custom surface hostnames

Serve your surface on your own domain, such as agents.example.com, instead of the agined.com subdomain. Agined asks Cloudflare for the certificate and hands you the TXT records to publish. Once the hostname is active, the gateway answers there as on your allocated host.

What gets recordedthe hostname, its verification and certificate state, the time of the last check, the TXT records to publish, and the surface it now serves

your domaincertificate includedTXT DNS records

Explore hostname.custom Read the hostname.custom docs

api.agined.com/api/workspaces/agn-ws_••••/hostnamesPOST

POST /api/workspaces/agn-ws_••••/hostnames
Authorization: Bearer ••••••••
Content-Type: application/json

{
  "hostname": "agents.example.com"
}

→ 201 { hostname, status }

PRIMITIVE 27 / HANDLER.HOST

Hosted action handlers

No callable backend yet? Write the handler and Agined runs it in a worker of its own, behind the same policy and records as any backend. Versions are uploaded, activated and rolled back like the catalogue. Limits on CPU time, duration and response size are set per surface and shown before you deploy.

What gets recordedthe handler version, its code hash, when it was activated, its limits, and for each call the outcome and the time it took

a worker per tenantversioned, reversibleper-surface caps

Explore handler.host Read the handler.host docs

terminalShell

agined handler-push ./handler.js --workspace agn-ws_•••• --activate

→ version 7 active

PRIMITIVE 28 / CATALOG.DEFINE

Catalogue as source code

Define actions in TypeScript, JSON or YAML: name, schemas, risk class, scopes, meter and confirmation. The agined CLI validates the whole catalogue on your machine and pushes it as a draft. The same file is reviewed and versioned like the rest of your code, in the same pull request.

What gets recordedeach action's id, summary, input and output schema, risk class, side-effect class, scopes, meter and rate class

TypeScript, JSON or YAMLchecked locallyreviewed like code

Explore catalog.define Read the catalog.define docs

terminalShell

agined push ./agined.catalog.ts --dry-run

→ 14 actions valid

PRIMITIVE 29 / PUSH.GATE

Breaking-change gate before publish

agined push replays your draft against 30 days of recorded calls before it publishes. A dropped confirmation, a lowered risk class or a removed scope stops the publish until a person names it, and --block-on-breaking stops a removed action or a narrowed schema too, so CI can hold the change back.

What gets recordedthe live and draft versions, each breaking change, each change it could not replay, and who acknowledged it

stops weakeningbuilt to run in CIbreaking gate

Explore push.gate Read the push.gate docs

terminalShell

agined push --block-on-breaking

→ 1 change stopped: orders.cancel lost its confirmation

01 / 16Scroll or swipe over an entry to skim

The suite

Primitives

61 primitives. One catalogue.
One chain anyone can check.

Each primitive works on the same catalogue, the same gate and the same chain. Turn on what a surface needs – the rest stays out of the call path.

Your API as MCP, REST and A2A, from one catalogue.

PRIMITIVE 01 / SURFACE.MCP

Hosted MCP server

What gets recordedaction id, actor, the policy decision, outcome, status, the request body hash, and the moment of the call on your chain

gated like every REST callStreamable HTTP8 MCP methods

Explore surface.mcp Read the surface.mcp docs

superfly.a2pi.app/mcpPOST

POST /mcp
Authorization: DPoP ••••••••
DPoP: eyJ0eXAiOiJkcG9wK2p3dCJ9…
Content-Type: application/json

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": { "name": "orders.create", "arguments": { "sku": "widget" } }
}

→ 200 { result }

PRIMITIVE 02 / SHADOW.IMPORT

Instant Surface import

What gets recordedevery observed operation, its inferred schemas, the suggested risk class, and whether it was adopted

6 log formatsOTel spans and HAR filesadopts nothing by itself

Explore shadow.import Read the shadow.import docs

api.agined.com/api/workspaces/agn-ws_••••/catalog/shadow/import?format=harPOST

POST /api/workspaces/agn-ws_••••/catalog/shadow/import?format=har
Authorization: Bearer ••••••••

→ 200 { observations }, the HAR file is the body

PRIMITIVE 16 / OPENAPI.IMPORT

OpenAPI catalogue import

one draft per callschemas taken from the specskipped ones listed

Explore openapi.import Read the openapi.import docs

api.agined.com/api/workspaces/agn-ws_••••/catalog/importPOST

POST /api/workspaces/agn-ws_••••/catalog/import
Authorization: Bearer ••••••••
Content-Type: application/json

{
  "document": { "openapi": "3.1.0", "paths": { … } }
}

→ 200 { drafted, skipped }

PRIMITIVE 17 / ASYNCAPI.IMPORT

AsyncAPI catalogue import

event-driven surfaces toomessage schemasreviewed by a person

Explore asyncapi.import Read the asyncapi.import docs

api.agined.com/api/workspaces/agn-ws_••••/catalog/importPOST

POST /api/workspaces/agn-ws_••••/catalog/import
Authorization: Bearer ••••••••
Content-Type: application/json

{
  "document": { "asyncapi": "3.0.0", "operations": { … } }
}

→ 200 { drafted, skipped }

PRIMITIVE 18 / REGISTRY.PUBLISH

Signed registry publish

What gets recordedregistry version, tenant, signing slot, the issue time, and each action with its schema, risk class, meter and scopes

a2pireg1 signed formatevery version restorablefails closed always

Explore registry.publish Read the registry.publish docs

api.agined.com/api/workspaces/agn-ws_••••/catalog/publishPOST

POST /api/workspaces/agn-ws_••••/catalog/publish
Authorization: Bearer ••••••••

→ 200 { version, ref, distributed }

PRIMITIVE 19 / SURFACE.REST

Agent REST surface per host

What gets recordedaction id, request id, actor, outcome and status, which gate refused it if one did, the request body hash, and the call's place on your chain

17 ordered gatestyped refusal per gateMCP / A2A

Explore surface.rest Read the surface.rest docs

superfly.a2pi.app/api/v1/actions/orders.getPOST

POST /api/v1/actions/orders.get
agined-consumer-key: ••••••••
Content-Type: application/json

{
  "orderId": "ord_1042"
}

→ 200 { data }  agined-proof: /verify?call=…

PRIMITIVE 20 / SURFACE.A2A

A2A agent endpoint

What gets recordedthe card's endpoint, the skills from your catalogue, and for each task the action, actor, decision and outcome

AgentCard 0.3.0message/sendtasks/get only

Explore surface.a2a Read the surface.a2a docs

superfly.a2pi.app/a2aPOST

POST /a2a
Authorization: DPoP ••••••••
DPoP: eyJ0eXAiOiJkcG9wK2p3dCJ9…
Content-Type: application/json

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "message/send",
  "params": { "message": { "role": "user", "parts": […] } }
}

→ 200 { result: task }

PRIMITIVE 21 / SURFACE.OAUTH

Agent OAuth and registration

What gets recordedthe client id and name, its registration time, its auth method and its granted scopes, all kept with the client's registration record

dynamic registrationDPoP-bound tokensscopes from catalogue

Explore surface.oauth Read the surface.oauth docs

superfly.a2pi.app/oauth/registerPOST

POST /oauth/register
Content-Type: application/json

{
  "client_name": "Superfly Agent",
  "grant_types": ["client_credentials"]
}

→ 201 { client_id, client_secret }

PRIMITIVE 22 / WELLKNOWN.PUBLISH

Agent discovery documents

What gets recordedall 14 well-known documents, the catalogue version they describe, and the hash of each document emitted at the moment of publish

14 docsdid.json for each surfacellms.txt too

Explore wellknown.publish Read the wellknown.publish docs

superfly.a2pi.app/.well-known/agent-card.jsonGET

GET /.well-known/agent-card.json

→ 200 { name, url, skills }

PRIMITIVE 23 / ARTIFACTS.EMIT

Eleven formats per publish

What gets recordedeach format's file and its hash, the catalogue version it was built from, and the exact moment the whole set went live

11 formats per publishcontent-addressedone set per publish

Explore artifacts.emit Read the artifacts.emit docs

superfly.a2pi.app/.artifacts/openapi.jsonGET

GET /.artifacts/openapi.json

→ 200 OpenAPI 3.1, same version as /mcp

PRIMITIVE 24 / PORTAL.HOST

Portal, changelog and status

What gets recordedthe catalogue version each page describes, every changelog entry with its date, and each published action's status, worked out live

4 guidesAtom and JSON feedsa status page each

Explore portal.host Read the portal.host docs

superfly.a2pi.app/changelog.jsonGET

GET /changelog.json

→ 200 { entries }

PRIMITIVE 25 / EGRESS.SIGN

Signed calls to your backend

What gets recordedthe execution path, the contract, any handler note, the call's duration and your backend's status

RFC 9421 signaturesSSRF check per hopsafe retries

Explore egress.sign Read the egress.sign docs

superfly.a2pi.app/.well-known/agined-egress-jwks.jsonGET

GET /.well-known/agined-egress-jwks.json

→ 200 { keys: [{ kid: "agined-egress-1" }] }

PRIMITIVE 26 / HOSTNAME.CUSTOM

Custom surface hostnames

What gets recordedthe hostname, its verification and certificate state, the time of the last check, the TXT records to publish, and the surface it now serves

your domaincertificate includedTXT DNS records

Explore hostname.custom Read the hostname.custom docs

api.agined.com/api/workspaces/agn-ws_••••/hostnamesPOST

POST /api/workspaces/agn-ws_••••/hostnames
Authorization: Bearer ••••••••
Content-Type: application/json

{
  "hostname": "agents.example.com"
}

→ 201 { hostname, status }

PRIMITIVE 27 / HANDLER.HOST

Hosted action handlers

What gets recordedthe handler version, its code hash, when it was activated, its limits, and for each call the outcome and the time it took

a worker per tenantversioned, reversibleper-surface caps

Explore handler.host Read the handler.host docs

terminalShell

agined handler-push ./handler.js --workspace agn-ws_•••• --activate

→ version 7 active

PRIMITIVE 28 / CATALOG.DEFINE

Catalogue as source code

What gets recordedeach action's id, summary, input and output schema, risk class, side-effect class, scopes, meter and rate class

TypeScript, JSON or YAMLchecked locallyreviewed like code

Explore catalog.define Read the catalog.define docs

terminalShell

agined push ./agined.catalog.ts --dry-run

→ 14 actions valid

PRIMITIVE 29 / PUSH.GATE

Breaking-change gate before publish

What gets recordedthe live and draft versions, each breaking change, each change it could not replay, and who acknowledged it

stops weakeningbuilt to run in CIbreaking gate

Explore push.gate Read the push.gate docs

terminalShell

agined push --block-on-breaking

→ 1 change stopped: orders.cancel lost its confirmation

01 / 16Scroll or swipe over an entry to skim

Your API for SI/AI agents, governed and provable.

One dashboard, from your first API call to the proof behind it.

An agent's call should carry its own permission and its own proof.

What makes an Agined record hard to fake.

61 primitives. One catalogue.One chain anyone can check.

Hosted MCP server

Start free. Upgrade when your agents need it.

What people ask first.

Your API for SI/AI agents, governed and provable.

One dashboard, from your first API call to the proof behind it.

An agent's call should carry its own permission and its own proof.

What makes an Agined record hard to fake.

61 primitives. One catalogue.One chain anyone can check.

Hosted MCP server

Start free. Upgrade when your agents need it.

What people ask first.

Works with these and many more SI/AI models and agents

Serve your API to agents over MCP.

A catalogue drafted from real traffic.

A person signs off before the call runs.

Products

Compliance

Developers

Social Media

Company

Legal

Delegate authority that can only narrow.

See the blast radius before you switch.

Every refusal says exactly why.

One file that proves a disputed call.

Let agents pay per call, no account.

Get listed where agents look for tools.

61 primitives. One catalogue.
One chain anyone can check.

61 primitives. One catalogue.
One chain anyone can check.