Check an independently verified AgentID identity for your own merchant offer

Merchant server authenticates with access:check scope and asserts the AgentID issuer/subject independently verified by its own application. An atomic lookup checks the merchant-owned active offer, canonical agent registration and current clearance. The response contains no owner identity or private balance. No registration, grant, hold, capture or fee is created; native application resource permissions remain the merchant responsibility.

POST/v1/access/merchant-check

Authorization

AuthorizationBearer token · headerrequired

Scoped merchant API key (asm_...) issued via POST /v1/merchants/{id}/api-keys. Path/scope-restricted; cannot access human or agent routes. Merchant admission requires access:check; /v1/me exposes only merchant actor metadata.

Request body

requiredapplication/json

offerIdstringrequired

min length 1 · max length 200

agentIdentityobjectrequired

Show properties

issuerstringrequired

subjectstringrequired

min length 1 · max length 200

Responses

200

Current access decision; no funds reserved or consumed

agentIdstringrequired

agentIdentityobjectrequired

Show properties

issuerstringrequired

subjectstringrequired

merchantIdstringrequired

offerIdstringrequired

allowedbooleanrequired

paymentRequiredbooleanrequired

priceUcMicrocreditsrequired

Integer microcredits as a decimal string. 1 credit = 1,000,000 microcredits = $0.01 USD.

matches ^[0-9]+$

voucherEndpointstring

400

Invalid offer request

401

unauthorized problem; live 401s advertise WWW-Authenticate: Bearer resource_metadata=...

typestringrequired

titlestringrequired

statusintegerrequired

codestringrequired

403

Identity, ownership, scope or policy denied (human_required, owner_claim_required, scope_required, FROZEN, CAP_EXCEEDED, SCOPE_FORBIDDEN)

typestringrequired

titlestringrequired

statusintegerrequired

codestringrequired

404

Registered agent or active merchant-owned offer not found

Request

curl -X POST 'https://api.agentsub.dev/v1/access/merchant-check' \
  -H 'Authorization: Bearer YOUR_TOKEN' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{
  "offerId": "string",
  "agentIdentity": {
    "issuer": "https://auth.agentid.com",
    "subject": "string"
  }
}'

const response = await fetch("https://api.agentsub.dev/v1/access/merchant-check", {
  method: "POST",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: "{\n  \"offerId\": \"string\",\n  \"agentIdentity\": {\n    \"issuer\": \"https://auth.agentid.com\",\n    \"subject\": \"string\"\n  }\n}"
});

import requests

response = requests.post(
    "https://api.agentsub.dev/v1/access/merchant-check",
    headers={
        "Authorization": "Bearer YOUR_TOKEN",
        "Accept": "application/json",
        "Content-Type": "application/json"
    },
    data="{\n  \"offerId\": \"string\",\n  \"agentIdentity\": {\n    \"issuer\": \"https://auth.agentid.com\",\n    \"subject\": \"string\"\n  }\n}",
)

Response

{
  "agentId": "string",
  "agentIdentity": {
    "issuer": "string",
    "subject": "string"
  },
  "merchantId": "string",
  "offerId": "string",
  "allowed": true,
  "paymentRequired": true,
  "priceUc": "string",
  "voucherEndpoint": "string"
}

{
  "type": "https://agentsub.dev/problems/not_found",
  "title": "string",
  "status": 0,
  "code": "string"
}

{
  "type": "https://agentsub.dev/problems/not_found",
  "title": "string",
  "status": 0,
  "code": "string"
}