> ## Documentation Index
> Fetch the complete documentation index at: https://api-docs.imbawallet.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Identity-only register

> Creates an agent account and Ed25519 credential. Does **not** assign a
TRON address and does **not** credit USDT.

Optional `email` is the 3-D Secure mailbox (not SMS, not cardholder KYC).
HMAC plaintext is returned **once** if `callback_url` is accepted.
Repeat register does not return the secret.

Caution **medium** or Agent API disabled → `503`.




## OpenAPI

````yaml /openapi/agent.openapi.yaml post /auth/v1/agent/register
openapi: 3.1.0
info:
  title: IMBA Agent API
  version: 0.1.0
  summary: Prepaid HTTP API for autonomous agents
  description: |
    Permissionless prepaid agents: register an Ed25519 key, fund USDT on TRC-20,
    buy the live catalog (virtual cards, eSIM, gift cards).

    - API host: `https://imbawallet.com` (not `api.imbawallet.com`)
    - Human docs: `https://api-docs.imbawallet.com/agent`
    - HowTo: `https://imbawallet.com/agent_api_about_en.html`
    - Not Partner B2B (`/api/partner`, `https://api.imbawallet.com`)
    - Not a human Wallet HS256 session
    - Access JWT: `typ=agent`, `client_id`, EdDSA (same JWKS as Partner)
    - Tier 0 (default): catalog spend only. Convert closed (AML).
    - Tier 1+: operator reputation after real catalog spend. Convert is a
      separate request — raising the number does not turn convert on.
    - Withdraw and C2C stay closed.
  contact:
    name: IMBA Agent Support
    email: support@imbawallet.com
  license:
    name: Proprietary
    url: https://imbawallet.com
servers:
  - url: https://imbawallet.com
    description: Production (auth + retail /api)
security:
  - bearerAuth: []
tags:
  - name: Auth
    description: Register, assertion JWT, webhook, HMAC
  - name: Deposit
    description: USDT TRC-20 deposit address
  - name: Catalog
    description: Cards, eSIM, gifts, and catalog reads
  - name: KYT
    description: Optional paid address screen
paths:
  /auth/v1/agent/register:
    post:
      tags:
        - Auth
      summary: Identity-only register
      description: >
        Creates an agent account and Ed25519 credential. Does **not** assign a

        TRON address and does **not** credit USDT.


        Optional `email` is the 3-D Secure mailbox (not SMS, not cardholder
        KYC).

        HMAC plaintext is returned **once** if `callback_url` is accepted.

        Repeat register does not return the secret.


        Caution **medium** or Agent API disabled → `503`.
      operationId: registerAgent
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RegisterRequest'
            example:
              public_key: |-
                -----BEGIN PUBLIC KEY-----
                MCowBQYDK2VwAyEA...
                -----END PUBLIC KEY-----
              email: agent-otp@example.com
      responses:
        '200':
          description: Agent identity created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RegisterResponse'
        '400':
          $ref: '#/components/responses/Error'
        '429':
          $ref: '#/components/responses/Error'
        '503':
          $ref: '#/components/responses/Error'
      security: []
components:
  schemas:
    RegisterRequest:
      type: object
      required:
        - public_key
      properties:
        public_key:
          type: string
          description: Ed25519 public key (PEM or base64)
        tos_hash:
          type: string
        callback_url:
          type: string
          format: uri
          description: HTTPS webhook URL
        jwe_public_key:
          type: string
          description: X25519 public key for JWE card secrets
        email:
          type: string
          format: email
          description: Optional mailbox for 3-D Secure OTP. Not SMS. Not cardholder KYC.
    RegisterResponse:
      type: object
      properties:
        client_id:
          type: string
          description: Decimal agent id (`iss` on later assertions)
        kid:
          type: string
        hmac_secret:
          type: string
          description: Shown once when callback_url is accepted
        email:
          type: string
    Error:
      type: object
      required:
        - error
      properties:
        error:
          type: string
          example: not_allowed
        message:
          type: string
  responses:
    Error:
      description: Error
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: >-
        EdDSA access token, `typ=agent`, `client_id`. JWKS `GET
        /auth/v1/partner/jwks`.

````