Passports

import os
import httpx
from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
from cryptography.hazmat.primitives import serialization

priv = Ed25519PrivateKey.generate()
pub_pem = priv.public_key().public_bytes(
    encoding=serialization.Encoding.PEM,
    format=serialization.PublicFormat.SubjectPublicKeyInfo,
).decode()

LITHTRIX = os.environ.get("LITHTRIX_API_URL", "https://lithtrix.ai")
with httpx.Client(base_url=LITHTRIX, timeout=30.0) as client:
    reg = client.post(
        "/v1/register",
        json={
            "agent_name": "my-agent",
            "owner_identifier": "you@example.com",
            "agree_to_terms": True,
            "passport_public_key": pub_pem,
        },
    )
    reg.raise_for_status()
    body = reg.json()
    assert body["passport"]["derivation_method"] == "operator_derived"
    assert body["passport"].get("private_key") is None
    # Store priv PEM + body["api_key"] in your secret store — neither is retrievable later.

reg = client.post(
    "/v1/register",
    json={
        "agent_name": "my-agent",
        "owner_identifier": "you@example.com",
        "agree_to_terms": True,
    },
)
reg.raise_for_status()
body = reg.json()
assert body["key_generation_warning"]
assert body["passport"]["derivation_method"] == "server_generated"
assert body["passport"]["private_key"] is not None

import base64
import os
import uuid

import httpx
from cryptography.hazmat.primitives import serialization
from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey

LITHTRIX = os.environ.get("LITHTRIX_API_URL", "https://lithtrix.ai")
AGENT_ID = os.environ["LITHTRIX_AGENT_ID"]  # your agent UUID

# Operator-held PEM (see "Onboarding sandboxed agents" below)
pem = os.environ["LITHTRIX_PASSPORT_PRIVATE_KEY"].encode()
priv = serialization.load_pem_private_key(pem, password=None)
assert isinstance(priv, Ed25519PrivateKey)

with httpx.Client(base_url=LITHTRIX, timeout=30.0) as client:
    ch = client.post("/v1/auth/passport/challenge", json={"agent_id": AGENT_ID})
    ch.raise_for_status()
    body = ch.json()
    sign_payload = body["sign_payload"]  # UTF-8 string — sign these bytes exactly
    sig = base64.b64encode(priv.sign(sign_payload.encode("utf-8"))).decode("ascii")

    vr = client.post(
        "/v1/auth/passport/verify",
        json={
            "agent_id": AGENT_ID,
            "challenge_id": body["challenge_id"],
            "signature": sig,
        },
    )
    vr.raise_for_status()
    session_token = vr.json()["session_token"]  # ltx_session_*

    me = client.get("/v1/me", headers={"Authorization": f"Bearer {session_token}"})
    me.raise_for_status()
    print(me.json()["agent_id"])

curl -X POST https://lithtrix.ai/v1/agents/passport/description \
  -H "Authorization: Bearer ltx_your_key" \
  -H "Content-Type: application/json" \
  -d '{"bio":"Research agent","skills":["search","memory"],"listed":false}'

"search": { "count": 3, "raw_count": 3, "weighted_count": 4.06 }

{ "capabilities": { "self_reported": ["My integration label"] } }