The plane

All modules

55 modules. One admission engine.
One record of what happened.

Each module puts the same admission, lease and record to work on another part of the fleet. Every plan includes all of them – nothing to buy per module.

Who each agent is, who it answers to, what it sees.

MODULE 11 / COORDINATION.FLEETMAP

Fleet Map

Every agent in your workspace on one screen: what its mandate lets it do, which leases it holds right now, how far it is trusted, and whether it is stopped. The map is drawn from what agents declare and attest as they pass through the plane – no inventory to keep by hand.

What gets recordedagents with grants, leases in force, waiters per resource, presence, quarantines, and the gateway’s mode

one screen per fleetdrawn from declarationslive leases

Explore coordination.fleetmap Read the coordination.fleetmap docs

api.intramedial.com/api/v1/acp/coordination/fleetmapGET

GET /api/v1/acp/coordination/fleetmap
Authorization: Bearer av_workspace_••••

→ 200 { agents, leases, grants, waiters, presence, quarantined, mcpMode, github, ledger }

MODULE 12 / IDENTITY.ENROLL

Agent identity registry

Enroll each agent as its own identity principal, with a DID, an accountable owner and its keys. Bind a SPIFFE ID, import SCIM resources or trust A2A roots, and every action the plane later admits resolves to exactly one agent – never a shared service account.

What gets recordedDID, display name, owner, kind, bound SPIFFE ID, the moment of enrollment, and the entries a SCIM import skipped

DID / SPIFFE / A2ASCIM importone owner per agent

Explore identity.enroll Read the identity.enroll docs

api.intramedial.com/api/v1/acp/identity/enrollPOST

POST /api/v1/acp/identity/enroll
Authorization: Bearer av_workspace_••••
Content-Type: application/json

{
  "did": "did:web:acme.example:agent:billing",
  "displayName": "Billing agent",
  "kind": "customer"
}

→ 200 { agent, skipped }

MODULE 13 / MCP.SHADOW

Shadow agent discovery

Find the agents nobody registered. Every enforcement point notes the callers it cannot resolve – the tools they use, their traffic, their fingerprints – and lists them here. Sanction one and it becomes a first-class identity; refuse it and it stays visible, with every call it made.

What gets recordedthe unresolved caller, the tools it used, first and last seen, the enforcement point that saw it, and the sanction decision

seen at every gatewaysanction or refusenothing unlisted

Explore mcp.shadow Read the mcp.shadow docs

api.intramedial.com/api/v1/acp/mcp/shadowGET

GET /api/v1/acp/mcp/shadow
Authorization: Bearer av_workspace_••••

→ 200 { events, kind, protocolVersion }

MODULE 14 / CIVICS.PRESENCE

Agent presence

Who else is working here, and on what – one call away. Agents send a heartbeat, and their peers see each one's status, when it was last seen and the leases it holds. An agent that can see a peer's leases has no reason to suspect it of sabotage.

What gets recordedagent DID, reported status, last heartbeat, and the live leases it holds, for peers to read before they act

heartbeat per agentlive leases shownpeers made visible

Explore civics.presence Read the civics.presence docs

api.intramedial.com/api/v1/acp/civics/presencePOST

POST /api/v1/acp/civics/presence
Authorization: Bearer av_workspace_••••
Content-Type: application/json

{
  "did": "did:web:acme.example:agent:billing",
  "status": "online"
}

→ 200 { row, all }

MODULE 15 / TRUST.GET

Trust scores and autonomy

Turn an agent's history into graduated autonomy. Leases released on time and honest effect reports raise its score; abandoned leases and rulings against it lower it. Each autonomy tier names the score it needs, so autonomy is earned in the open.

What gets recordedthe agent's score, each observation that moved it, its autonomy tier, and the thresholds each tier requires

graduated autonomyearned by behaviortiers stated

Explore trust.get Read the trust.get docs

api.intramedial.com/api/v1/acp/trust/getGET

GET /api/v1/acp/trust/get?did=did:web:acme.example:agent:billing
Authorization: Bearer av_workspace_••••

→ 200 { profile }

MODULE 16 / WORLDMODEL.GRAPH

World model graph

Everything your workspace knows by name, and how it connects. Agents name resources in their own words; the plane resolves those names into one graph and marks where what was declared about a thing differs from what was later seen. No map of your systems is needed up front.

What gets recordedeach resource node and its canonical name, the links between nodes, their source, and declared-versus-observed mismatches

names resolvedno map requireddrift marked

Explore worldmodel.graph Read the worldmodel.graph docs

api.intramedial.com/api/v1/acp/worldmodel/graphGET

GET /api/v1/acp/worldmodel/graph
Authorization: Bearer av_workspace_••••

→ 200 { nodes, llm }

MODULE 17 / CARTOGRAPHER.MAP

Cartographer edge review

Connections between resources that were proposed but are not yet law. The cartographer suggests edges from what agents report; you approve the ones that are right and refuse the rest, and a bound in your mandates decides which suggestions may go through on their own.

What gets recordedeach ratified edge, each amendment waiting for approval, and the auto-ratify bounds in force

proposed, then approveda person ratifiesbounds you wrote

Explore cartographer.map Read the cartographer.map docs

api.intramedial.com/api/v1/acp/cartographer/mapGET

GET /api/v1/acp/cartographer/map
Authorization: Bearer av_workspace_••••

→ 200 { edges, pending, bounds }

MODULE 18 / TENANCY.TREE

Tenant tree and reach

The tenant tree, and who may reach each branch. Delegate a branch to a team or a customer; suspending a tenant freezes everything beneath it, and revoking a delegation also revokes everything it passed on. Only owners, administrators and allowed delegates can change the tree.

What gets recordedeach tenant and its parent, delegations and who holds them, suspensions, revocations and their cascade, and who made each change

nested tenantscascading revocationsuspend a branch

Explore tenancy.tree Read the tenancy.tree docs

api.intramedial.com/api/v1/acp/tenancy/treeGET

GET /api/v1/acp/tenancy/tree
Authorization: Bearer av_workspace_••••

→ 200 { tenants, valid }

MODULE 19 / ONRAMP.SOURCES

Fleet on-ramp from export

Bring an existing fleet across from an export instead of rebuilding it. Intramedial reads the export and shows the whole plan first: every agent, grant and link it would create, and every entry it skipped and why. Nothing is enrolled until you apply the plan.

What gets recordedthe source, each planned agent, grant and link, every skipped entry with its reason, and what applying the plan created

plan before applyskips explainedno rebuild needed

Explore onramp.sources Read the onramp.sources docs

api.intramedial.com/api/v1/acp/onramp/sourcesGET

GET /api/v1/acp/onramp/sources
Authorization: Bearer av_workspace_••••

→ 200 { v, sources }

01 / 09Scroll or swipe over a module to skim

The catalogue

Browse modules