Operator-side surface — provisioning agents, listing them, updating them. For minting and rotating agent keys, see Keys and rotation. For runtime use of the agent identity in code, see Agent runtime. All methods on this page live underDocumentation Index
Fetch the complete documentation index at: https://docs.alterauth.com/llms.txt
Use this file to discover all available pages before exploring further.
App.agents — they require an app API key (alter_key_app_…).
Provisioning an agent
name is the stable identifier for the agent (lowercase, dash-separated). display_name is the UI label. The result includes both the agent’s UUID and an initial API key — the plaintext key is shown once; store it immediately. Re-mint with mint_key when the original plaintext is lost.
create is idempotent on name when an idempotency_key is passed — re-running the call with the same key returns the same agent and the same initial key.
Listing agents
include_revoked=True to also list revoked agents (default excludes them).
Looking an agent up
get_by_name returns None/null when no agent matches.
Updating an agent
scopes is a per-provider allowlist (a map of provider → list of OAuth scopes), not a flat list. Pass the FULL desired allowlist — the backend rejects narrowing (any provider key dropped, any scope removed) with AgentScopeNarrowingNotSupportedError.
Other editable fields: display_name, metadata, policy. The name is immutable — provision a new agent to rename.
Deleting / revoking an agent
delete soft-deletes the agent and revokes all its keys in one call:
KeyRevokedError.
See Keys and rotation for the full key surface.
See also
- Agents overview — when agents are the right fit.
- Keys and rotation — mint, list, deprecate, revoke keys.
- SDK → Agents reference — full method signatures.