Report a device attestation (endpoint agent check-in)
The tuteliq-agent CLI evaluates the org’s device-safety policy locally and reports the pass/fail result here. One latest-state record is kept per device (upsert, no history). The org is derived from the authenticated API key — any org_id in the body is ignored. No user content is stored; only device posture (policy rule results, versions, platform).
Authorizations
API key as Bearer token
Body
Stable non-PII device identifier (agent-generated hash).
128Reporting agent version (e.g. "0.1.0").
32OS platform (e.g. "darwin", "win32", "linux").
32Identifier of the evaluated policy manifest.
128True iff every policy rule passed.
Per-rule evaluation results.
100ISO 8601 timestamp of the local evaluation.
40Ignored — the org is always derived from the API key. Never trusted from the body.
128