Deploy an Agent
When to use
You have an agent runtime (LLM host, workflow engine, RPA bot) and want to bind it to an IDA agent DID with appropriate delegation.
Before you begin
- A signed-in account (any role).
- An MCP-I or A2A endpoint URL where your agent listens (or “platform-hosted” if you want IDA to host the bridge).
- A clear capability list (read-only? sign-on-behalf?). Default to least privilege.
Steps
- Navigate to
/agents/deploy. 2. Step 1 — Basics:- Name — human-friendly label.
- Description — what the agent does (used in the agent card).
- Principal DID — auto-populated with your primary DID.
- Step 2 — Identity:
- Either create a new DID for the agent (one transaction), or attach an existing DID.
- The wizard generates the keys server-side; private keys are stored encrypted with the wallet’s HSM master key.
- Step 3 — Capabilities:
- Select from a catalogue (e.g.,
read:credentials,present:credentials,sign:didcomm,issue:credentials(admin only),revoke:proofs). - For each capability, optionally constrain the resource (e.g.,
read:credentialsonly forschemaId in [foo,bar]).
- Select from a catalogue (e.g.,
- Step 4 — Autonomy & policy:
- Autonomy level — 1 (Observer) to 5 (Delegate). See §6.6.
- Maximum delegation depth — how many sub-agents this agent can spawn.
- Validity period — IBCT expiry.
- Step 5 — Endpoints:
- MCP server URL —
https://my.agent.example/mcp. - A2A endpoint URL — optional.
- Webhook URL — for in-platform callbacks.
- MCP server URL —
- Step 6 — Review & deploy.
The wizard performs:
POST /api/v1/didsto provision the agent DID.PUT /api/v1/dids/{did}to add the agent service endpoints.POST /api/v1/agentsto register the agent in the AgentTrustRegistry (agent.go:34,router.go:131).POST /api/v1/agents/{principal}/delegateto mint the initial IBCT (agent.go:166,router.go:137).
API & SDK
Verify
Open /agents — your agent appears with status active and trust score 0 (rises with usage). Resolve the agent’s DID — service endpoints are populated.