API referencediscovery
Get agent manifest
GET
/.well-known/aikonic.jsonThe signed onboarding manifest — environments, sign-up, key defaults, velocity, rail, certification
The one URL a coding agent is given: every environment's API and MCP endpoints, the sign-up routes and identities, the default key scopes for sandbox and LIVE_CAPPED agent keys, the velocity and loop…Show more
The one URL a coding agent is given: every environment's API and MCP endpoints, the sign-up routes and identities, the default key scopes for sandbox and LIVE_CAPPED agent keys, the velocity and loop thresholds, the rail step keys, the certification checks (advisory ones apart), the scenario catalogue, products, the pricing summary, SDK package names and the llms.txt, openapi.json and MCP documentation URLs. Public data, no credential, Cache-Control public, max-age=3600. Signed: jws is a detached-payload compact JWS (ES256) over the RFC 8785 canonical JSON of the document without jws, verifiable with the key of jws.kid at GET /.well-known/aikonic-jwks.json; an agent refuses a document that does not verify, and one past its expiresAt (issuedAt + 24 h). The key set is served from the same origin, so it is no independent trust anchor: the kid thumbprints are also published out of band, in the SDKs and the docs, and an agent pins them [verify]. If the signing key is unavailable the last signed document is served from cache and an alarm raised until its expiresAt. MCP: excluded.Request body
This operation takes no request body.
Responses
- 200The signed manifestAgentManifest
- 404NOT_FOUND — unknown or expired ref (unguessable refs, 15)ApiErrorResponse
- 500INTERNAL — a bug, and traceId is the support handle.ApiErrorResponse
Errors you should handle
Branch on code and honour retryable — never on the HTTP status alone.
| 404 | NOT_FOUND searchRef SR-F-7b31d0a9 is unknown or has expired; re-search | not retryable |
| 500 | INTERNAL An unexpected error occurred. Quote the traceId to support. | retryable |