Register a self-hosted A2A agent card for RFQ automation

Registers (or replaces) the org's self-hosted agent card URL for receiving RFQ/pricing requests. Requires the org to already be domain-verified, the card URL's hostname to match (or be a subdomain of) that verified domain, and the fetched card to declare a respond-to-rfq skill. Includes an SSRF guard (resolvesToPrivateIp) before ever fetching the card URL. Session callers must be an org owner or admin; bearer-token (Shopify plugin) callers are exempt from that role gate.

post/api/org/register-agent-card/

Request

  • Base URL: https://productindex.ai
  • URL: https://productindex.ai/api/org/register-agent-card/
  • Auth: one of:
    • API key in cookie authjs.session-token
    • HTTP bearer

Request body

agent_card_urlstring uri required

Must be https and on (or a subdomain of) the org's verified domain.

auth_type'none' | 'bearer' | 'hmac'
bearer_tokenstring

Required when auth_type is "bearer". Stored encrypted.

hmac_secretstring

Required when auth_type is "hmac". Stored encrypted.

Response

Agent card registered.

okboolean
validatedboolean

Changes

No recorded changes to this operation across all 1 revision of this API.