53DEVELOPER PLATFORM

Developer Platform: APIs, SDKs & Webhooks

Adding control should feel like adding observability—not rebuilding the agent.

Priority: P0
Phase: MVP
Primary owner: Developer Experience
Status: Blueprint

Objective

Agent Trust Cloud must be easy for internal platform teams and software vendors to embed. The developer platform should make identity, policy checks and event reporting simple enough that teams integrate controls during agent development instead of after deployment.

What to build

REST/JSON APIs for agents, policies, decisions, approvals, events and reports.
SDKs for Python and TypeScript first; add Java/.NET based on enterprise demand.
Pre-action policy-check and brokered-action methods.
Webhook events for violations, approvals, incidents, registry changes and budgets.
CLI for registration, policy test, gateway setup and diagnostics.

Implementation decisions

Publish stable versioning and backward-compatibility rules.
Provide idempotency keys for action/approval APIs.
Generate typed clients from authoritative schemas where practical.
Create local developer mode and test tenant fixtures.

Definition of done

A developer can protect a sample agent in under 30 minutes from docs.
SDK failures return actionable errors and correlation IDs.
Breaking changes require explicit version migration.

Success metrics

Time to first API call
SDK adoption
API error rate
Webhook delivery success

DEVELOPER PROMISE

Adding control should feel like adding observability—not rebuilding the agent.