Skip to content
deedglassdocs

Check a signed intent without acting

POST
/v1/intents/verify
curl --request POST \
  --url http://127.0.0.1:8080/v1/intents/verify \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Deedglass-Version: 2026-10-01' \
  --data '{ "tool": "stripe.refund", "args": { "charge": "ch_3QxZ8f2L", "amount": 1200 } }'

A conformance check for SDK authors. It checks the Deedglass-Intent header in every intent mode (off included) exactly as the Gate will, consumes the nonce, and never acts: no tool is called. Without the header the answer is 422 validation_failed (“Send a Deedglass-Intent header to check.”), except for an agent in required mode, which gets 403 intent_required. Refusals are 403 permission_error with code intent_invalid (param names the field), intent_replay or intent_required; never 401. Idempotency-Key is ignored. An agent key with actions:execute.

Authorizations

Section titled “Authorizations”

Parameters

Section titled “Parameters”

Header Parameters

Section titled “Header Parameters”
Deedglass-Version
string
/^[0-9]{4}-[0-9]{2}-[0-9]{2}$/

The API version (YYYY-MM-DD). Leave it out to use your org’s pinned version (public routes use the latest). An unknown version is 400 api_version_invalid.

Deedglass-Intent
string
<= 4096 characters

A signed intent: base64url of the intent’s JCS bytes, ., and base64url of the 64-byte Ed25519 signature. The intent follows the schema deedglass.intent/1; the signature input is "deedglass/intent/v1\n" followed by the intent_hash. Clocks may differ by up to 60 s either way, and an intent lives at most 5 minutes. See docs/INTENTS.md.

Deedglass-On-Behalf-Of
string
/^[A-Za-z0-9._~:@/+=-]{1,256}$/

The end user the agent acts for, in your own ids. At most once; a malformed or repeated header is 422 validation_failed.

Deedglass-Session
string
/^[A-Za-z0-9._~:@/+=-]{1,256}$/

The conversation or session the call belongs to, in your own ids. At most once; a malformed or repeated header is 422 validation_failed.

Request Bodyrequired

Section titled “Request Bodyrequired”
Media typeapplication/json
object
tool
required

The tool the intent names, as <connector>.<tool>.

string
/^[a-z][a-z0-9-]{1,31}\.[A-Za-z0-9_][A-Za-z0-9_.-]{0,127}$/
args
required

The arguments, any JSON value (use {} for none; at most 256 KiB).

Example
{
  "tool": "stripe.refund",
  "args": {
    "charge": "ch_3QxZ8f2L",
    "amount": 1200
  }
}

Responses

Section titled “Responses”

200

Section titled “200”

The intent passed every check, and its nonce is consumed.

Media typeapplication/json

What the Gate would see for this call. signed is false when no intent was sent (possible in off and optional mode); the intent fields are then null.

object
object
required
string
Allowed value: intent_check
signed
required
boolean
intent_hash
required
string | null
/^sha256:[0-9a-f]{64}$/
kid
required
string | null
/^[0-9a-f]{32}$/
agent
required
string
tool
required
string
args_digest
required

The SHA-256 of the arguments’ JCS bytes (RFC 8785).

string
/^sha256:[0-9a-f]{64}$/
on_behalf_of
required
string | null
session
required
string | null
expires_at
required
string | null format: date-time
nonce_consumed
required
boolean
intent_mode
required
string
Allowed values: off optional required
Example
{
  "object": "intent_check",
  "signed": true,
  "intent_hash": "sha256:87c73e450a53f0269e33f7adb8430a6f89714606f9aae38bc732536fef7e3089",
  "kid": "21fe31dfa154a261626bf854046fd227",
  "agent": "agt_01k633rrmh3bcz2p39gg4vp46q",
  "tool": "stripe.refund",
  "args_digest": "sha256:f7411a7cf4706333c9ba80c85aab7d8b92363ad3077a288dadc26bef42d89d36",
  "on_behalf_of": "usr_ext_4821",
  "session": "conv_9f2c",
  "expires_at": "2026-10-03T09:31:00.000Z",
  "nonce_consumed": true,
  "intent_mode": "optional"
}

Headers

Section titled “Headers”
Deedglass-Request-Id
string
/^req_[0-7][0-9a-hjkmnp-tv-z]{25}$/

This request’s id. Quote it to support; it matches error.request_id.

403

Section titled “403”

The intent was refused: intent_invalid (param names the field), intent_replay or intent_required.

Media typeapplication/json
object
error
required
object
type
required
string
Allowed values: invalid_request_error authentication_error permission_error policy_error rate_limit_error api_error
code
required
string
Allowed values: invalid_api_key api_key_revoked api_key_expired agent_suspended agent_stopped org_stopped insufficient_scope policy_denied approval_required approval_expired budget_exceeded intent_required intent_invalid intent_replay tool_unknown connector_unavailable upstream_error timeout rate_limited idempotency_conflict validation_failed not_found conflict internal_error authentication_required method_not_allowed request_too_large unsupported_media_type invalid_json api_version_invalid idempotency_key_invalid idempotency_key_in_use service_unavailable session_expired csrf_failed insufficient_role login_link_invalid login_code_invalid last_owner policy_unavailable policy_invalid credentials_missing destination_blocked vault_unavailable upstream_auth_failed upstream_not_found upstream_rate_limited response_too_large statement_refused row_limit_exceeded database_role_unsafe database_not_ready witness_not_configured approval_decided already_countersigned approver_not_eligible self_approval approval_needs_person context_changed approval_unsatisfiable approval_link_invalid approval_link_review_only approver_unmapped stripe_live_key_refused stripe_livemode_detected upstream_approval_pending schedule_needs_approval action_executing from_denied undo_unavailable undo_plan_stale already_undone undo_conflict replay_too_large replay_window_invalid suggestion_stale shadow_slot_taken suggestion_decided observe_not_enabled pro_required
message
required

One or more calm sentences with the next step.

string
param
required

The request field, query parameter or header the error is about.

string | null
request_id
required
string
/^req_[0-7][0-9a-hjkmnp-tv-z]{25}$/
doc_url
required
string format: uri
diagnostics

On policy_invalid only. Each problem with its line, code and hint.

Array<object>

One finding about a policy file, with its position and the next step. Codes are stable and listed in docs/POLICY_ERRORS.md. In the policy_invalid error envelope each diagnostic also carries object: policy_diagnostic. The full PolicyDiagnostic schema is in openapi.yaml.

object
action

One agent action. Its sections mirror the deed’s. status is the one field an agent needs; state is the exact lifecycle state (docs/GATE.md). The Gate’s own responses (POST /v1/actions and its result report) add execution.result and witness.reasons; lists leave both out. The full Action schema is in openapi.yaml.

object
checks

On undo_unavailable only. Every check of the undo, each with its fix. Additive (S23).

Array<object>

One of the twelve safety checks (S23 §3.3). Available means no check failed. The full UndoCheck schema is in openapi.yaml.

object
Examples

The nonce was already used

{
  "error": {
    "type": "permission_error",
    "code": "intent_replay",
    "message": "This signed intent was already used at 09:30:02 UTC. Sign a new intent, with a fresh nonce, for every call.",
    "param": "nonce",
    "request_id": "req_01j9zr3m5k8q2w7x4t6v0b1c9d",
    "doc_url": "https://docs.deedglass.com/errors/intent_replay"
  }
}

Headers

Section titled “Headers”
Deedglass-Request-Id
string
/^req_[0-7][0-9a-hjkmnp-tv-z]{25}$/

This request’s id. Quote it to support; it matches error.request_id.

default

Section titled “default”

An error. Every error has this envelope; doc_url explains the code.

Media typeapplication/json
object
error
required
object
type
required
string
Allowed values: invalid_request_error authentication_error permission_error policy_error rate_limit_error api_error
code
required
string
Allowed values: invalid_api_key api_key_revoked api_key_expired agent_suspended agent_stopped org_stopped insufficient_scope policy_denied approval_required approval_expired budget_exceeded intent_required intent_invalid intent_replay tool_unknown connector_unavailable upstream_error timeout rate_limited idempotency_conflict validation_failed not_found conflict internal_error authentication_required method_not_allowed request_too_large unsupported_media_type invalid_json api_version_invalid idempotency_key_invalid idempotency_key_in_use service_unavailable session_expired csrf_failed insufficient_role login_link_invalid login_code_invalid last_owner policy_unavailable policy_invalid credentials_missing destination_blocked vault_unavailable upstream_auth_failed upstream_not_found upstream_rate_limited response_too_large statement_refused row_limit_exceeded database_role_unsafe database_not_ready witness_not_configured approval_decided already_countersigned approver_not_eligible self_approval approval_needs_person context_changed approval_unsatisfiable approval_link_invalid approval_link_review_only approver_unmapped stripe_live_key_refused stripe_livemode_detected upstream_approval_pending schedule_needs_approval action_executing from_denied undo_unavailable undo_plan_stale already_undone undo_conflict replay_too_large replay_window_invalid suggestion_stale shadow_slot_taken suggestion_decided observe_not_enabled pro_required
message
required

One or more calm sentences with the next step.

string
param
required

The request field, query parameter or header the error is about.

string | null
request_id
required
string
/^req_[0-7][0-9a-hjkmnp-tv-z]{25}$/
doc_url
required
string format: uri
diagnostics

On policy_invalid only. Each problem with its line, code and hint.

Array<object>

One finding about a policy file, with its position and the next step. Codes are stable and listed in docs/POLICY_ERRORS.md. In the policy_invalid error envelope each diagnostic also carries object: policy_diagnostic. The full PolicyDiagnostic schema is in openapi.yaml.

object
action

One agent action. Its sections mirror the deed’s. status is the one field an agent needs; state is the exact lifecycle state (docs/GATE.md). The Gate’s own responses (POST /v1/actions and its result report) add execution.result and witness.reasons; lists leave both out. The full Action schema is in openapi.yaml.

object
checks

On undo_unavailable only. Every check of the undo, each with its fix. Additive (S23).

Array<object>

One of the twelve safety checks (S23 §3.3). Available means no check failed. The full UndoCheck schema is in openapi.yaml.

object
Example
{
  "error": {
    "type": "invalid_request_error",
    "code": "not_found",
    "message": "There's no endpoint at GET /v1/helth. Did you mean /v1/health?",
    "param": null,
    "request_id": "req_01j9zr3m5k8q2w7x4t6v0b1c9d",
    "doc_url": "https://docs.deedglass.com/errors/not_found"
  }
}

Headers

Section titled “Headers”
Deedglass-Request-Id
string
/^req_[0-7][0-9a-hjkmnp-tv-z]{25}$/

This request’s id. Quote it to support; it matches error.request_id.

Deedglass-Version
string

The API version this response follows.