Skip to main content
POST
Report a device attestation (endpoint agent check-in)

Authorizations

Authorization
string
header
required

API key as Bearer token

Body

application/json
device_id
string
required

Stable non-PII device identifier (agent-generated hash).

Maximum string length: 128
agent_version
string
required

Reporting agent version (e.g. "0.1.0").

Maximum string length: 32
platform
string
required

OS platform (e.g. "darwin", "win32", "linux").

Maximum string length: 32
policy_id
string
required

Identifier of the evaluated policy manifest.

Maximum string length: 128
passed
boolean
required

True iff every policy rule passed.

results
object[]
required

Per-rule evaluation results.

Maximum array length: 100
attested_at
string
required

ISO 8601 timestamp of the local evaluation.

Maximum string length: 40
org_id
string

Ignored — the org is always derived from the API key. Never trusted from the body.

Maximum string length: 128

Response

200 - application/json

Default Response

recorded
boolean
expires_at
string

ISO 8601 expiry (attested_at + 90 days); Firestore TTL reaps the row after this.

credits_used
number