identity.enrollModule 12Give each agent its own identity before it acts, so every admitted action traces back to one agent and never to a shared account.
identity.enroll records an agent in the workspace registry by its DID, a display name and a kind. Where an identity runtime is bound it also issues the agent's own DID, and each agent starts with a trust profile at the baseline score of 50. SPIFFE IDs and SCIM users attach to the same registry.
Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
© 2026 Intramedial. All rights reserved. Intramedial is a product by Trustvice. Secured and supercharged by Avonao Labs.
Report abuse
Plane module
diddisplayNamekindhouse, customer or partner. Defaults to ./docs/identity-enrollAPI referenceRoutes, bodies and status codes./docs/identity-enrollOpen the consoleSee the module at work in the dashboard, on a seeded fleet or your own./dashboard-preview/identity-registryStart freeCreate a workspace and admit your first intent./auth/signup
customerissuedDidspiffeIdidentity/spiffe, once bound.ownerenrolledAtshadowtrue when the agent is tracked but not yet sanctioned, the mark mcp.shadow offers.skippedtrue when no DID was issued, which happens only on a worker with no identity runtime.Post did and displayName. kind is customer, partner or house and defaults to customer. owner names the account to notify when the agent's trust tier changes.
When the identity runtime is bound it issues a DID for the agent, returned as issuedDid. If the runtime refuses or cannot be reached, the enrollment is refused and nothing is recorded.
The agent joins the workspace registry, and its DID and its issued DID each get a trust profile at score 50.
A SPIFFE ID is bound with identity/spiffe, SCIM users arrive through identity/scim, and A2A trusted roots and delegations go through identity/a2a.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private. identity.enroll docs
Press Run to send the request on the left to the shared demo workspace.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private.
A request in the shape the API accepts, and an example response in the shape the module returns.
POST /api/v1/acp/identity/enroll Authorization: Bearer av_workspace_•••• Content-Type: application/json { "did": "did:web:acme.example:agent:billing", "displayName": "Billing agent", "kind": "customer" } → 200 { agent, skipped }
{
"agent": {
"did": "did:web:acme.example:agent:billing",
"displayName": "Billing agent",
"kind": "customer",
"enrolledAt": "2026-11-01T09:12:44.000Z",
"issuedDid": "did:web:id.example:agent:billing",
"workspaceId": "ws_acme"
},
"skipped": false
}A billing agent enrolls once. Every later admission, lease and approval names its DID, never a shared service account.
SCIM resources become customer agents. A deprovision with active: false drops the linked agent and takes its issued DID back.
A new DID is a new agent even for the same code. It gets a trust score of its own and no history carried over.
An agent seen at the MCP gateway but never enrolled is enrolled with shadow: true to track it, or without to sanction it.
mandates.compile.trust.get shows where it stands now.onramp.sources to plan and apply many agents in one pass.A module is a strong claim about a narrow thing. Rely on it for exactly what it is.
owner is whatever account the enroller names, and it is optional.Enrolling needs the agents.create permission. The matrix gives it to owners and admins, and a token carries it only when its scopes do.
When the organization already holds the agents its plan includes, the identity runtime refuses the DID with a 402 and the enrollment is refused with it.
If the identity runtime misses a step of a SCIM deprovision, the request fails with every agent still enrolled. Each step is idempotent, so the identity provider's retry finishes it.
identity_active_agents meter.displayName is required, and the MCP action caps it at 200 characters.Authenticate with a workspace API key as a Bearer token. The base URL is https://api.intramedial.com.
/api/v1/acp/identity/enrollEnroll one agent and return its record./api/v1/acp/identity/listList the workspace's enrolled agents.coordination.identity.enrollEnroll one agent as an MCP action.coordination.identity.listList the workspace's enrolled agents as an MCP action.onramp.sources19Fleet on-ramp from exportMove an existing agent fleet into the plane from an export you already have, after you have read exactly what would land.mcp.shadow13Shadow agent discoveryList the tool calls the MCP gateway has seen, with the agent behind each, so callers nobody enrolled show up beside the ones that are.trust.get15Trust scores and autonomyRead an agent's trust score and the autonomy tier it has earned, so autonomy follows conduct the plane has actually seen.coordination.fleetmap11Fleet MapRead every agent grant, lease, waiter and quarantine in the workspace in one call, drawn from what the plane has admitted.civics.presence14Agent presenceLet agents see which peers are online and what each holds, so a quiet agent is not mistaken for a hostile one.worldmodel.graph16World model graphSee every agent, repo, lease and named resource your workspace knows, and how they connect, without drawing the map first.cartographer.map17