AGINDOW agent surface

api-reference / v1

Local interface preview

AGINDOW is a pre-alpha API drift firewall. Detection is off until you configure it. Coverage describes observed evidence and cannot prove every API change is safe. The local MCP interface exposes lookup_contract, query_drift, fetch_audit, simulate_repair and coverage_report. Requests require authorization; simulations never execute writes. A hosted endpoint is not available yet.

Runnable example

For a locally configured endpoint, set AGINDOW_SURFACE to its origin and AGINDOW_KEY to your authorized credential, then run the example below. No hosted endpoint or API key issuance is available yet.

Verify the API description

Get /openapi.json and verify its x-agindow-signature with an independently trusted Ed25519 public key and key_id. Remove the signature field, encode using agindow.canonical-json/1 (recursively sorted keys, JSON primitives), then verify the exact UTF-8 bytes. The signed tools contain the input and output schemas served by MCP. Never trust a public key merely because the response includes it.

curl -sS "$AGINDOW_SURFACE/mcp" \
  -H "Authorization: Bearer $AGINDOW_KEY" \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -H 'MCP-Protocol-Version: 2025-03-26' \
  --data '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"coverage_report","arguments":{"tools":["vendor.read"]}}}'