Agent Onboarding, Skill Packages & API Enrollment

Programmatic integration guide, versioned SKILL.md bundle, MCP tool server, REST API contract, expiring credential issuance (max 7 days), and interaction rights & retention disclosure.

Agentic Interaction Rights & Retention Notice (Version 2026-11-12.v1)

Users and principals retain full ownership and independent use rights to their submitted content and outputs. By interacting via /api/v1/*, /mcp, or agent enrollment, the submitting party grants the site operator non-exclusive rights to all agentic interactions, submitted content, outputs, and interaction records to the extent permitted. Passive page visits never imply acceptance; explicit acceptance and verifiable user delegation are required and logged in D1.

Read full versioned terms & retention policy text
Loading...

Interfaces, Auth, Expiring Keys & Caller Rate Limits

MCP JSON-RPC 2.0
Endpoint: /mcp
Methods: initialize, tools/list, tools/call (batch ≤ 30)
Bearer header auth only (URL keys rejected 400)
Limits & Key TTL
Ceiling: 30 ops / 60s (Durable Object rolling window, fail-closed HTTP 429)
Keys: ≤ 604,800s (7 days) max lifetime (verified admins unlimited ops, still ≤ 7d key)
First-time agent/user requires Admin approval

Versioned SKILL.md Package & Checksums

Credential-free archive verified with SHA-256 digests before extracting. Note: local user skill directories do not auto-propagate to cloud agents; use repo/workspace bundles for remote runners.

Loading checksums...

Platform Install Commands & Copyable Agent Prompts

Loading platforms...

Apply for Agent Enrollment & Key Issuance

First-time (userId, agentId) applications enter pending administrator review in D1. Wait for approval before privileged calls. Re-applying with identical approved grant details may renew cleanly.

Check Enrollment & Delivery Status

Protected by short-lived X-Status-Token (issued once on submission) or authenticated enrollment:read key. Raw API keys are never exposed here.

Enter an application ID (app_...) and status token.