Copy the URL. Paste your key. Ask your agent.

agent.json: the canonical machine-readable description.

Served at /.well-known/agent.json with a co-published legacy /.well-known/ai-plugin.json. The block below is rendered from the same builder that powers the well-known route, so the doc you copy and the doc an agent fetches can never drift.

{
  "schema_version": "agent.json/1.0",
  "service": "axiru",
  "name": "Axiru",
  "description_for_model": "Use the Axiru MCP server to request pre-execution decisions on money movement (Stripe refunds/credits/payouts, x402 agent payments, USDC-on-Solana transfers in early access), list pending approvals, approve or reject them, inspect the audit ledger, and fetch workspace setup state. Suitable for agentic finance assistants that need deterministic policy enforcement before execution.",
  "description_for_human": "The governed action layer for money movement: policy-check refunds, credits, payouts, and stablecoin transfers before money moves.",
  "contact_email": "support@axiru.com",
  "legal_info_url": "https://axiru.com/privacy",
  "documentation_url": "https://axiru.com/docs/api",
  "logo_url": "https://axiru.com/logo.svg",
  "base_url": "https://axiru.com",
  "endpoints": {
    "mcp": {
      "url": "https://axiru.com/api/mcp",
      "protocol_version": "2025-03-26",
      "transport": "streamable-http"
    },
    "onboard": {
      "url": "https://axiru.com/api/agent/onboard",
      "method": "POST"
    }
  },
  "auth": {
    "type": "bearer",
    "tokenPrefix": "ak_"
  },
  "starter_intents": [
    {
      "id": "refund_governance",
      "description": "Set up refund governance for a SaaS company."
    },
    {
      "id": "chargeback_review",
      "description": "Stand up chargeback review with shadow mode enabled."
    },
    {
      "id": "audit_only",
      "description": "Read-only audit assistant for an existing Stripe history with no enforcement."
    }
  ],
  "merger_status": "in_progress",
  "siblings": [
    "ifivo"
  ]
}

The MCP endpoint advertises protocol_version 2025-03-26 over the streamable-http transport. Auth is bearer with the ak_ prefix; the legacy ai-plugin.json maps the same auth model down to the user_http / bearer pair for older clients.

Pick the intent. The orchestrator does the rest.

Each intent installs a different starter policy pack. Repeated calls with the same idempotency key return the same tenant, so an agent loop never forks workspaces.

POST /api/agent/onboard: request and response.

Unauthenticated by design: the endpoint mints shadow-mode-only tenants. Rate-limited to 10 requests per 60 seconds per identifier so a runaway agent loop cannot fork workspaces.

curl -X POST https://www.axiru.com/api/agent/onboard \
  -H 'content-type: application/json' \
  -d '{"intent":"refund_governance","contact_email":"ops@example.com","company_name":"Example Inc.","agent_id":"claude-3.7-sonnet","vertical":"saas","idempotency_key":"<= 16-char stable key generated by the agent"}'

const res = await fetch("https://www.axiru.com/api/agent/onboard", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({
    "intent": "refund_governance",
    "contact_email": "ops@example.com",
    "company_name": "Example Inc.",
    "agent_id": "claude-3.7-sonnet",
    "vertical": "saas",
    "idempotency_key": "<= 16-char stable key generated by the agent"
  }),
});
const { tenant_id, api_key, magic_link, human_summary } = await res.json();

{
  "tenant_id": "ws_2c8a...",
  "api_key": "ak_live_...",
  "mcp_endpoint": "https://www.axiru.com/api/mcp",
  "starter_policies": [
    {
      "id": "recommended-default",
      "slug": "conservative-smb",
      "name": "Conservative starter (auto-allow <$100, escalate above)"
    },
    {
      "id": "intent-refund_governance",
      "slug": "intent-refund_governance",
      "name": "Intent template · refund governance"
    }
  ],
  "simulation_url": "https://www.axiru.com/preview/replay?ws=ws_2c8a...",
  "magic_link": "https://www.axiru.com/auth/magic?token=...",
  "human_summary": "I created a shadow-mode workspace for Example Inc. Click this once to finish setup."
}

The api_key is returned exactly once. Hand the magic_link straight to the human; the rest goes to the agent loop. human_summary is a one-liner the agent can relay verbatim so the user sees consistent language across providers.

Four steps, every time, in the same order.

The orchestrator lives in @intentledger/agent-core/onboarding. Each step is idempotent and side-effect-injected through an OnboardingHost so Axiru and any sibling service can reuse the engine.

Shadow mode is the default. Always.

Every workspace minted through /api/agent/onboard starts with policies installed in shadow mode. The engine evaluates every decision and writes to the ledger, but tool calls are not blocked and money does not move until the human clicks the magic link, completes Stripe Connect, and explicitly flips enforcement.