---
title: "Begin device-style enrollment with an agent-generated public JWK. Returns a short owner code; private key material is refused."
method: POST
path: "/auth/agents/proof/enroll/begin"
tags: ["agent_identity"]
---

# Begin device-style enrollment with an agent-generated public JWK. Returns a short owner code; private key material is refused.

`POST /auth/agents/proof/enroll/begin`

## Request

- Base URL: `https://obeliskgate.com`
- URL: `https://obeliskgate.com/auth/agents/proof/enroll/begin`
- Auth: none declared

## Request body

- object
  - `name` string: string
  - `subjectKind` unknown
  - `publicJwk` unknown
  - `visibility` unknown

## Response `200`

Success.

## Other responses

- `default`: Error — { ok:false, reason:<code>, message?:<human> } on failures; HTTP status mirrors it.

---

[API](https://skmtc.dev/obeliskgate/apis/obelisk-api.md) · [All operations](https://skmtc.dev/obeliskgate/apis/obelisk-api/llms.txt) · [OpenAPI document](https://skmtc.dev/obeliskgate/apis/obelisk-api/revisions/b99b2069699b?raw)