Developer platform

Integrate agents without trusting a dashboard.

Use REST, MCP, A2A and the public machine-readable contracts. The US$2 Agent Passport Certificate uses a signed Passport checkout request and webhook-only payment fulfillment.

OpenAPI MCP endpoint A2A Agent Card $2 Passport product

Create an Agent Passport

Generate an Ed25519 keypair locally and create a Passport through the Security API. The private key never leaves your system.

Security API →

Issue a test API key

Sign `accordtrace.developer.api_key.create.v1` with the Passport key. The returned `at_test_…` token is shown once; AccordTrace stores only its hash.

Developer capabilities →

Test enforcement

Call `/api/v1/developer/test/ping` with `Authorization: Bearer at_test_…`. The `test:read` scope is enforced server-side.

API reference →

US$2 Agent Passport Certificate

Signed checkout. Webhook fulfillment.

The commercial endpoint stays fail-closed until Stripe price, Stripe secret, webhook secret and the AccordTrace Certificate signing key are all configured. Check readiness first.

01Check readiness

GET `/api/v1/passport-product/capabilities`. Continue only when `commercial_ready` is true.

02Reserve referral

Optional: cryptographically reserve the direct referral before checkout.

03Sign checkout

Sign the `accordtrace.passport-product.checkout.v1` payload using the active Passport key.

04Pay $2

POST `/api/v1/passport-product/checkout`, then open the returned Stripe Checkout URL.

05Read Certificate

Wait for webhook-driven `fulfilled` state and retrieve the canonical Certificate URL.

Checkout payload

Signed by the buying Passport

{
  "domain": "accordtrace.passport-product.checkout.v1",
  "request_id": "req_...",
  "passport_id": "agtp_...",
  "product_id": "agent_passport_certificate",
  "product_version": "1",
  "referral_code": "atr_... or null",
  "requested_at": "ISO-8601"
}

Payment truth

Never trust the success redirect

`checkout.session.completed` or the supported asynchronous success event must reach the verified Stripe webhook. The browser return URL cannot issue a Certificate or qualify a commission.

Check live readiness →

Referral economics

$2 sale → $1 direct commission

A valid direct attribution can qualify a US$1 commission after a genuine US$2 Certificate sale. One level only. Refunds/chargebacks can reverse unpaid commission.

Referral policy →

Key model

Explicit scopes. Separate environments.

Test and live credentials use different prefixes. Live issuance is off by default. Revocation is signed by the owning Passport.

TESTat_test_…

Safe integration environment.

LIVEat_live_…

Disabled until explicitly enabled.

STORESHA-256 only

Raw keys are not persisted.

SCOPELeast privilege

Explicit allowlisted scopes.

REVOKEPassport signed

Owner controls revocation.