Manifests API

All routes require an admin bearer token.

POST /v1/manifests

Submit a new manifest version for an existing agent (re-attestation). Manifests are append-only: this always creates a new version, never edits one in place.

Request body (ManifestCreate):

{
  "agent": "kb-search-agent",
  "manifest": { "...": "AgentManifest" },
  "override": { "reason": "optional" }
}

Responses: same shape and status codes as POST /v1/agents (see Agents API) — 404 additionally if agent names an agent that has never been registered.

GET /v1/manifests/{scope}

Immutable, version-pinned read of a manifest.

Query params: version (optional; omit for latest)

Response (ManifestRead):

{
  "agent": "kb-search-agent",
  "version": 1,
  "status": "reconciled",
  "attested_by": "admin",
  "doc": { "...": "the manifest document as submitted" },
  "created_at": "2026-09-01T12:00:00Z"
}

404 if the scope or the specific version doesn't exist.

Related

• Manifest Store
• Register and reconcile a manifest
• Agent Manifest schema