Agent Compliance

Refresh agent snapshot

Changed on

Re-probe the agent and update its registry health (online, tools_count, response_time_ms), capability snapshot (inferred type, discovered tools), and compliance verdict (storyboard pass/fail counts). Use after fixing your agent so the registry shows fresh data without waiting for the periodic heartbeat (~1h).

Compliance re-run: when the caller owns the agent or is an AAO admin and the capability probe succeeds, the full storyboard suite can run for several minutes on capability-rich agents with a fresh test session, and agent_storyboard_status is updated. Owner-triggered runs use triggered_by: 'owner_test'; admin-triggered support runs use triggered_by: 'manual'. Badge fan-out reissues verification badges off the new run. If the compliance call fails (timeout, OAuth wall, internal error), the capability/health portion still returns successfully — compliance.ran is false with an error string.

Auth: owner of the agent, AAO admin, or static ADMIN_API_KEY. Human submissions are temporarily fenced with HTTP 503 until durable authorization provenance is supported; static admin API key submissions remain available.

Rate limits: 60 seconds per agent URL, 30 requests per user per hour.

post/api/registry/agents/{encodedUrl}/refresh

Request

  • Base URL
    https://agenticadvertising.org
  • URL
    https://agenticadvertising.org/api/registry/agents/{encodedUrl}/refresh
  • Auth
    • HTTP bearer
    • or OAuth 2
      Authorization code: https://agenticadvertising.org/authorize
      Token URL: https://agenticadvertising.org/token

Path parameters

encodedUrlstring required

URL-encoded agent URL

Example:https%3A%2F%2Fvastlint.org%2Fmcp

Headers

Prefer'respond-async'

Return the durable refresh operation immediately instead of waiting up to 90 seconds for a legacy synchronous result.

Request body

organization_idstring

Selected organization ID. The caller must own the agent in this organization before its credentials are used.

Response

Snapshot refreshed inside the bounded 90-second compatibility window

onlineboolean required
tools_countinteger nullable required
response_time_msinteger nullable required
inferred_typestring required

Type inferred from discovered tools (sales, creative, signals, governance, etc.) or 'unknown'

type_promotedboolean required

True when registry type was upgraded from unknown to inferred_type

oauth_requiredboolean required
checked_atstring required
errorstring
refresh_operation_idstring uuid

Present when this response recovered a recently completed operation.

test_session_idstring

Stable test-session identity, present on recovered responses.

status_urlstring

Durable operation URL, present on recovered responses.

coalescedboolean

Changes

    • info

      added the required property / to the response with the status

    • breaking

      the mandatory response header Retry-After removed for the status 503

    • breaking

      removed the required property / from the response with the status

    • warning

      added the new refresh_authorization_provenance_required enum value to the / response property for the response status

    • info

      added the required property / to the response with the status

    • info

      added the required property / to the response with the status

    • info

      added the required property / to the response with the status

    • info

      added the required property / to the response with the status

    • info

      added the required property / to the response with the status