API reference · CAIN Identity

Issue Passport

POST /fabric/identity/passport/issue

Last reviewed 2026-10-06

POST /fabric/identity/passport/issue

ISSUE a signed passport for an identity in the caller's tenant. Agent keys are refused.

Parameters

Name	In	Type	Meaning
`tenant`	query	string or null

Request body

PassportIssueRequest (required)

Field	Type	Meaning
`identity_id` required	string
`posture` required	object	model/runtime/system_prompt_digest/memory_digest/tools
`capabilities` required	array of string	Explicit capabilities; each must be held by the identity now
`authority_scope`	object	targets/environments/purposes/max_risk/params
`policy_reference`	string	default `""`
`risk_profile`	string	default `"UNASSESSED"`
`ttl_seconds`	integer	default `3600`

Responses

Status	Meaning	Body
`200`	Successful Response	object
`422`	Validation Error	`HTTPValidationError`
`401`	No key, or a key that is not valid	JSON `detail`
`429`	Rate limit for your plan reached; retry after the Retry-After seconds	JSON `detail`

Try it

Your API key X-API-Key Remember the key in this tab onlytenant queryRequest body application/json

This call changes data in the account the key belongs to.

The request goes from your browser straight to this site. Your key is not stored unless you tick the box, and then only in this tab's session storage.

Code

curl -sS -X POST 'https://cainstudio.online/fabric/identity/passport/issue' \
  -H "X-API-Key: $CAIN_API_KEY" \
  -H 'Content-Type: application/json' \
  -d '{"identity_id": "identity-id", "posture": {}, "capabilities": ["capabilities"], "policy_reference": "", "risk_profile": "UNASSESSED", "ttl_seconds": 3600}'

import json, os, urllib.request

req = urllib.request.Request('https://cainstudio.online/fabric/identity/passport/issue', method='POST',
    headers={"X-API-Key": os.environ["CAIN_API_KEY"], "Content-Type": "application/json"},
    data=json.dumps({
      "identity_id": "identity-id",
      "posture": {},
      "capabilities": [
        "capabilities"
      ],
      "policy_reference": "",
      "risk_profile": "UNASSESSED",
      "ttl_seconds": 3600
    }).encode())
with urllib.request.urlopen(req, timeout=60) as r:
    print(r.status, json.load(r))

const res = await fetch("https://cainstudio.online/fabric/identity/passport/issue", {
  method: "POST",
  headers: {
    "X-API-Key": process.env.CAIN_API_KEY!,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    "identity_id": "identity-id",
    "posture": {},
    "capabilities": [
      "capabilities"
    ],
    "policy_reference": "",
    "risk_profile": "UNASSESSED",
    "ttl_seconds": 3600
  }),
});
console.log(res.status, await res.json());

Schemas used

HTTPValidationError · PassportIssueRequest · ValidationError

← Passport Check Action · all 30 CAIN Identity calls · Passport Issuer →

Try CAIN-42 on your own agents

Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.

Create a free account → · Try the sandbox · See the whole ecosystem