POST /v1/agent-cards/{cardId}/disclosure
Mint a one-time disclosure handle for a card a human has already allowed. Returns a short-lived reference, never card details. Permission failures answer 403 rather than 404: the card may well exist, and saying so tells the caller to go and ask a human.
POST
/v1/agent-cards/{cardId}/disclosure
Mint a one-time disclosure handle for a card a human has already allowed. Returns a
short-lived reference, never card details. Permission failures answer 403 rather than
404: the card may well exist, and saying so tells the caller to go and ask a human.
Path Parameters
cardId
string
required
path
Card ID
Header Parameters
X-Run-ID
string
optional
header
Workflow run recorded on the disclosure for audit
Responses
200
OK
application/jsoncode
integer
data
object
cardId
string
expiresAt
string
handle
string
message
string
requestId
string
403
Forbidden
curl -X POST 'https://api.example.com/v1/agent-cards/string/disclosure' \ -H 'Authorization: Bearer YOUR_API_TOKEN'const response = await fetch('https://api.example.com/v1/agent-cards/string/disclosure', { method: 'POST', headers: { "Authorization": "Bearer YOUR_API_TOKEN" }});const data = await response.json();console.log(data);import requestsheaders = { 'Authorization': 'Bearer YOUR_API_TOKEN'}response = requests.post('https://api.example.com/v1/agent-cards/string/disclosure', headers=headers)print(response.json())package mainimport ( "fmt" "io" "net/http")func main() { req, _ := http.NewRequest("POST", "https://api.example.com/v1/agent-cards/string/disclosure", nil) req.Header.Set("Authorization", "Bearer YOUR_API_TOKEN") resp, _ := http.DefaultClient.Do(req) defer resp.Body.Close() result, _ := io.ReadAll(resp.Body) fmt.Println(string(result))}
200
Response
{ "code": 200, "data": { "cardId": "<string>", "expiresAt": "<string>", "handle": "<string>" }, "message": "success", "requestId": "abc-123"}API Playground
Try this endpoint
POST
/v1/agent-cards/{cardId}/disclosure