Agent

Report a device attestation (endpoint agent check-in)

Changed on

The tuteliq-agent CLI evaluates the org's device-safety policy locally and reports the pass/fail result here. One latest-state record is kept per device (upsert, no history). The org is derived from the authenticated API key — any org_id in the body is ignored. No user content is stored; only device posture (policy rule results, versions, platform).

post/api/v1/agent/check-in

Request

  • Base URL: https://api.tuteliq.ai
  • URL: https://api.tuteliq.ai/api/v1/agent/check-in
  • Auth: one of:
    • HTTP bearer
    • API key in header x-api-key

Request body

device_idstring required

Stable non-PII device identifier (agent-generated hash).

agent_versionstring required

Reporting agent version (e.g. "0.1.0").

platformstring required

OS platform (e.g. "darwin", "win32", "linux").

policy_idstring required

Identifier of the evaluated policy manifest.

passedboolean required

True iff every policy rule passed.

attested_atstring required

ISO 8601 timestamp of the local evaluation.

org_idstring

Ignored — the org is always derived from the API key. Never trusted from the body.

Response

Default Response

recordedboolean
expires_atstring

ISO 8601 expiry (attested_at + 90 days); Firestore TTL reaps the row after this.

credits_usednumber

Changes