API
| Route | What it does |
|---|---|
GET /broker-keystone/samples | Issuer, audience, key id, the demo grants and scenarios |
POST /broker-keystone/mint | {"agent","method","path","body"?,"ttl"?,"approval"?} → decision (+ token) |
POST /broker-keystone/attenuate | {"token","path"?,"body"?,"ttl"?} → a narrower child (rules: delegation) |
POST /broker-keystone/introspect | Check a token without using it |
/api/v1/broker-keystone/demo-api/… | The demo service: accepts Authorization: CAIN-Action <token> |
GET /broker-keystone/.well-known/jwks.json | The minting key |
GET /broker-keystone/verifier.py | The standalone verifier |
GET /broker-keystone/issuance/latest, /issuance/verify/{jti}, /bundle | The signed issuance log |
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.