Create agent
id must be DNS-safe (lowercase alphanumeric + hyphens). Returns 201 with the agent object.
Entrypoint vs agent_config: if config.entrypoint is set, the platform runs it via sandbox.exec.start(). If config.agent_config is set instead, the platform uses sandbox.agent.start() with the provided system_prompt and allowed_tools. They are mutually exclusive.
CRUD
Agent object
Secrets
Convenience wrapper over OpenComputer’s secret store. Values are AES-256-GCM encrypted at rest, injected as sealed tokens at sandbox creation. Values are never returned via API.PUT auto-creates a backing OC secret store named agent:{agentId}. allowed_hosts is optional — restricts which outbound hosts can receive the decrypted value.
List secrets returns keys and metadata only: