AuthSpokeAuthSpoke Developers

Quick Start

Make your first authenticated AuthSpoke API call and register an AI agent in under five minutes.

This guide takes you from zero to a governed AI agent. You'll authenticate, then create an agent and watch AuthSpoke compute its risk and trust scores.

Which host do I call? Register once at https://authspoke.com. Signup returns your tenant URL — a https://trial-######.authspoke.com subdomain you can rename to a custom domain like https://your-company.authspoke.com. Use your tenant URL for signin and every tenant-scoped call. Machine clients (agents, SDKs, CI) use the stable host https://api.authspoke.com — there the tenant comes from the token. The examples below use your-company.authspoke.com; replace it with your subdomain.

1. Get a token#

Exchange your console credentials for a JWT bearer token.

curl -X POST "https://your-company.authspoke.com/api/v1/auth/signin" \
  -H "Content-Type: application/json" \
  -d '{"username":"[email protected]","password":"••••••••"}'

{ "token": "eyJhbGciOiJIUzI1NiJ9..." }

Export it for the rest of this guide:

export TOKEN="eyJhbGciOiJIUzI1NiJ9..."

The token carries your tenant context. Every tenant-scoped endpoint uses it to isolate your data server-side.

2. Register an AI agent#

curl -X POST "https://your-company.authspoke.com/api/v1/ai/agents" \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "invoice-reconciler",
    "owner": "[email protected]",
    "modelProvider": "Anthropic",
    "modelVersion": "claude-opus-4",
    "environment": "PRODUCTION",
    "authMethod": "OAUTH",
    "businessCriticality": "CRITICAL",
    "productionAccess": true,
    "sensitiveDataAccess": true,
    "connectedMcpCount": 3
  }'

The response includes server-computed riskScore and trustScore — you never send these:

{
  "agentId": "676e64d6-4457-4e7d-952f-0081a0d502e0",
  "name": "invoice-reconciler",
  "riskScore": 82,
  "trustScore": 64,
  "lifecycleState": "REGISTERED"
}

3. See your posture#

curl "https://your-company.authspoke.com/api/v1/ai/overview" -H "Authorization: Bearer $TOKEN"

You'll get an enterprise AI status, risk bands, shadow-AI counts and your highest-risk agents — exactly what mission control renders.

4. Read the audit trail#

Registering the agent emitted an event. Read the live feed:

curl "https://your-company.authspoke.com/api/v1/ai/activity" -H "Authorization: Bearer $TOKEN"

What next#