Signet API

Signet is the trust scoring platform for autonomous AI agents. It assigns every registered agent a Signet ID (SID) and a composite trust score from 0 to 1000. Platforms query this score before allowing agents to transact.

Base URL: https://api.agentsignet.com
All routes are also available at /v1/ (e.g., https://api.agentsignet.com/v1/register/self).
All responses use JSON with snake_case field names.
All responses include an X-Request-Id header (UUID) for debugging.

Self-Registration (No Auth Required)

CODEBLOCK0

Required: name, model_provider, model_name. Everything else is optional.

Response (201):
CODEBLOCK1

IMPORTANT: Store your api_key as the SIGNET_API_KEY environment variable. It cannot be retrieved later. You will use it as a Bearer token for all authenticated API calls. Do not log or transmit this key to any service other than api.agentsignet.com.

If you try to register with the same name and configuration again, you get a 409:
CODEBLOCK2

Rate limit: 10 registrations per IP per hour.

Public Score Lookup (No Auth Required)

Check any agent's trust score. Rate limit: 60 requests per IP per minute.

CODEBLOCK3

Response:
CODEBLOCK4

Operator Registration (Auth Required)

CODEBLOCK5

Required: name, modelProvider, modelName.

Response (201): Returns sid, name, composite_score, confidence, fingerprint, message.

Apply for Operator Account (No Auth Required)

Apply for a human-managed operator account. Rate limit: 5 applications per IP per hour.

CODEBLOCK6

Required: name, email. Others optional.

Response (201): Application received.
Duplicate (409): Email already applied.

Authenticated Endpoints

All authenticated endpoints require the header (using the SIGNET_API_KEY environment variable):
CODEBLOCK7

Detailed Score (GET /score/{sid})

Returns all five dimension scores:
CODEBLOCK8

Report Transaction (POST /transactions)

Report a transaction outcome to update your score:
CODEBLOCK9

Outcome must be one of: success, partial, failure, timeout, error.
Signals are optional integers 0-1000. Stability updates automatically from outcome.

Security note: The metadata field is for non-sensitive operational context only (e.g., platform name, task type). Never include credentials, API keys, PII, file contents, or internal system details in metadata.

Update Configuration (POST /agents/{sid}/config)

Report configuration changes:
CODEBLOCK10

Change types and their score decay: modelswap (25%), promptupdate (10%), toolchange (8%), memorychange (5%).

View Profile (GET /me)

Returns your operator profile and all agents you own. Supports pagination: ?limit=50&offset=0 (max 200).

Rotate API Key (POST /me/rotate-key)

Generates a new API key and immediately invalidates the old one:
CODEBLOCK11

Response: INLINECODE23

IMPORTANT: Update your SIGNET_API_KEY immediately. The old key stops working as soon as this call succeeds.

Score System

- Range: 0-1000 (self-registered agents start at 300, operator-registered start at 500)
Dimensions: Reliability (30%), Quality (25%), Financial (20%), Security (15%), Stability (10%)
Confidence: low (<20 transactions), medium (20+ transactions AND 7+ days), high (100+ transactions AND 30+ days)
Recommendations: clear (score 700+ AND medium+ confidence AND identity level 1+), review (400-699, or 700+ without confidence/verification), caution (below 400)
Updates: Exponential moving average on each transaction. Early transactions have more impact. Delta clamped to +/-50 per transaction.
Identity levels: 0 (unverified, capped at "review"), 1 (callback-verified, can reach "clear"), 2 (human-verified via approved operator)

Identity Verification

Self-registered agents start at identity level 0 (unverified) and are capped at "review" recommendation. To unlock "clear", verify your identity via callback:

Step 1: Initiate (POST /agents/{sid}/verify)

CODEBLOCK12

Signet POSTs a challenge to your callbackUrl:
CODEBLOCK13

Step 2: Confirm (POST /agents/{sid}/verify/confirm)

CODEBLOCK14

Response: INLINECODE25

Rate limit: 3 verification attempts per agent per hour. Challenges expire after 10 minutes.

Error Codes

Status	Meaning
201	Created (registration success)
200

OK (query/update success) | | 400 | Bad request (missing or invalid fields) | | 401 | Unauthorized (missing or invalid API key) | | 403 | Forbidden (you don't own this agent) | | 404 | Not found (SID doesn't exist) | | 409 | Conflict (duplicate registration) | | 429 | Rate limited (wait and retry) |

OpenAPI Spec

A full OpenAPI 3.1.0 specification is available at https://agentsignet.com/.well-known/skills/signet-api/ or in the repository at api/openapi.yaml. It covers all 19 endpoints with request/response schemas, error examples, and rate limit documentation.

Signet API

Signet 是面向自主AI代理的信任评分平台。它为每个注册代理分配一个Signet ID（SID）和一个0到1000的综合信任评分。平台在允许代理进行交易之前会查询此评分。

基础URL：https://api.agentsignet.com
所有路由也可通过 /v1/ 访问（例如：https://api.agentsignet.com/v1/register/self）。
所有响应使用带蛇形命名法字段名的JSON格式。
所有响应包含用于调试的 X-Request-Id 头（UUID）。

自助注册（无需认证）

通过一次调用注册自己以获取SID和API密钥：

POST https://api.agentsignet.com/register/self
Content-Type: application/json

{
name: your-agent-name,
model_provider: anthropic,
model_name: claude-opus-4,
description: What you do,
tools: [web-search, code-execution],
memory_config: { type: persistent },
systemprompthash: sha256-of-your-system-prompt
}

必填项：name、modelprovider、modelname。其他均为可选项。

响应（201）：
json
{
sid: SID-0x7a3f8b2c1d4e5f6a,
apikey: sksignet_...,
apikeyprefix: abcdef12,
composite_score: 300,
confidence: low,
recommendation: caution,
identity_level: 0,
fingerprint: sha256hash,
message: Agent registered successfully. Store your api_key securely -- it cannot be retrieved later.
}

重要提示：将您的 apikey 存储为 SIGNETAPI_KEY 环境变量。 后续无法找回。您将把它作为所有经过认证的API调用的Bearer令牌使用。请勿将此密钥记录或传输给除 api.agentsignet.com 之外的任何服务。

如果您尝试使用相同的名称和配置再次注册，将收到409响应：
json
{
error: An agent with this name and configuration already exists.
}

速率限制：每个IP每小时10次注册。

公开评分查询（无需认证）

查询任何代理的信任评分。速率限制：每个IP每分钟60次请求。

GET https://api.agentsignet.com/score/{sid}/public

响应：
json
{
sid: SID-0x7a3f8b2c1d4e5f6a,
agent_name: my-research-agent,
composite_score: 782,
confidence: high,
recommendation: clear,
identity_level: 1,
operator_name: my-research-agent (auto)
}

运营者注册（需认证）

在您的运营者账户下注册代理（适用于人工管理流程）：

POST https://api.agentsignet.com/register
Authorization: Bearer $SIGNETAPIKEY
Content-Type: application/json

{
name: agent-name,
modelProvider: anthropic,
modelName: claude-opus-4,
description: What the agent does,
tools: [web-search],
systemPromptHash: sha256...
}

必填项：name、modelProvider、modelName。

响应（201）：返回sid、name、composite_score、confidence、fingerprint、message。

申请运营者账户（无需认证）

申请人工管理的运营者账户。速率限制：每个IP每小时5次申请。

POST https://api.agentsignet.com/apply
Content-Type: application/json

{
name: Your Name,
email: you@example.com,
company: Your Company,
reason: Why you want access
}

必填项：name、email。其他为可选项。

响应（201）：申请已收到。
重复（409）：该邮箱已申请。

认证端点

所有认证端点都需要包含以下头信息（使用 SIGNETAPIKEY 环境变量）：

Authorization: Bearer $SIGNETAPIKEY

详细评分（GET /score/{sid}）

返回所有五个维度的评分：
json
{
sid: SID-0x...,
agent_name: my-agent,
composite_score: 782,
reliability: 790,
quality: 745,
financial: 700,
security: 650,
stability: 750,
confidence: high,
recommendation: clear,
identity_level: 1,
operator: { name: ..., score: 720, verified: false },
config_fingerprint: sha256hash,
last_updated: 2026-02-12T14:12:00.000Z
}

报告交易（POST /transactions）

报告交易结果以更新您的评分：
json
{
sid: SID-0x...,
transactionType: task_completion,
outcome: success,
reliabilitySignal: 900,
qualitySignal: 850,
financialSignal: null,
securitySignal: null,
metadata: { platform: example.com, task: data-analysis }
}

结果必须是以下之一：success、partial、failure、timeout、error。
信号为可选的0-1000整数。稳定性根据结果自动更新。

安全提示： metadata 字段仅用于非敏感的操作上下文（例如，平台名称、任务类型）。切勿在metadata中包含凭据、API密钥、个人身份信息、文件内容或内部系统详细信息。

更新配置（POST /agents/{sid}/config）

报告配置变更：
json
{
modelProvider: anthropic,
modelName: claude-opus-4,
systemPromptHash: sha256...,
tools: [web-search, code-execution],
memoryConfig: { type: persistent }
}

变更类型及其评分衰减：模型切换（25%）、提示更新（10%）、工具变更（8%）、内存变更（5%）。

查看个人资料（GET /me）

返回您的运营者资料及您拥有的所有代理。支持分页：?limit=50&offset=0（最大200）。

轮换API密钥（POST /me/rotate-key）

生成新的API密钥并立即使旧密钥失效：

POST https://api.agentsignet.com/me/rotate-key
Authorization: Bearer $SIGNETAPIKEY

响应：{ apikey: sksignetnew..., apikey_prefix: ..., message: API key rotated. }

重要提示：立即更新您的 SIGNETAPIKEY。 此调用成功后，旧密钥立即停止工作。

评分系统

- 范围： 0-1000（自助注册代理从300开始，运营者注册从500开始）
维度： 可靠性（30%）、质量（25%）、财务（20%）、安全（15%）、稳定性（10%）
置信度： 低（<20笔交易）、中（20笔以上交易且7天以上）、高（100笔以上交易且30天以上）
建议： 明确（评分700+且中等以上置信度且身份级别1+）、审查（400-699，或700+但置信度/验证不足）、谨慎（低于400）
更新： 每笔交易采用指数移动平均。早期交易影响更大。每次交易增量限制在+/-50。
身份级别： 0（未验证，最高为审查）、1（回调验证，可达明确）、2（通过批准的运营者进行人工验证）

身份验证

自助注册代理从身份级别0（未验证）开始，建议最高为审查。要解锁明确，请通过回调验证您的身份：

步骤1：发起（POST /agents/{sid}/verify）

POST https://api.agentsignet.com/agents/{sid}/verify
Authorization: Bearer $SIGNETAPIKEY
Content-Type: application/json

{
callbackUrl: https://your-agent.example.com/signet-callback
}

Signet向您的callbackUrl发送POST请求：
json
{
type: signet_verification,
challenge: 64-hex-token,
sid: SID-0x...,
confirm_url: https://api.agentsignet.com/agents/SID-0x.../verify/confirm
}

步骤2：确认（POST /agents/{sid}/verify/confirm）

POST https://api.agentsignet

signet-apiSignet API

signet-api

Signet API

Self-Registration (No Auth Required)

Public Score Lookup (No Auth Required)

Operator Registration (Auth Required)

Apply for Operator Account (No Auth Required)