POST /v1/agent/bootstrap

​

Canonical metadata

• requestId
• organization
• apiKey
• billing
• limits
• distribution
• sponsorToken

​

Example request

curl -X POST \
  -H "secapi-version: 2026-03-19" \
  -H "content-type: application/json" \
  -d '{"token":"agtok_example_sponsor_token","label":"research-agent","scopes":["read:sec"]}' \
  "https://api.secapi.ai/v1/agent/bootstrap"

​

Example response

{
  "object": "agent_bootstrap",
  "requestId": "req_2ZK8Q1W9F4M6P7R3",
  "organization": { "id": "org_example" },
  "apiKey": { "secret": "returned_once" },
  "billing": { "object": "billing_account" },
  "limits": { "object": "limits" },
  "distribution": {},
  "sponsorToken": { "id": "agtok_example", "scopes": ["read:sec"] }
}

​

Authentication

​

Give this prompt to your agent

​

Failure posture

• bootstrap_token_invalid returns 404; obtain a valid sponsor token
• bootstrap_token_expired returns 410; request a new sponsor token
• bootstrap_token_already_used returns 409; sponsor tokens are single-use
• bootstrap_token_scope_invalid returns 400; self-serve exchange scopes are limited to read:sec
• api_key_limit_reached returns 402; resolve the organization’s active API-key limit before retrying