Report device inventory

POST

/devices/inventory

curl --request POST \
  --url https://example.com/v1/devices/inventory \
  --header 'Content-Type: application/json' \
  --header 'X-Device-Signature: example' \
  --data '{ "certificate": "example", "clientTimestamp": "2026-04-15T12:00:00Z", "agents": [ { "agentType": "claude-code", "displayName": "Claude Code", "mcps": [ { "name": "github", "enabled": true, "transport": "stdio" } ] } ] }'

• API base path

Reports the agents installed on the device and the MCP servers each is configured with. MCP entries include only name, enabled, and transport — never command, args, or env. Signed via the X-Device-Signature header.

Parameters

Header Parameters

X-Device-Signature

required

string

Base64 signature over the canonical payload, made with the device key

Request Body^required

Media typeapplication/json

object

certificate

required

PEM-encoded device certificate

string

clientTimestamp

required

string format: date-time

agents

required

Array<object>

object

agentType

string

Example

claude-code

displayName

string

Example

Claude Code

mcps

Array<object>

object

name

string

Example

github

enabled

boolean

transport

string

Allowed values: stdio http sse

Responses

200

Inventory accepted

Media typeapplication/json

object

success

boolean

deviceId

string format: uuid

agentsIn

integer

mcpsIn

integer

receivedAt

string format: date-time

Example ^generated

{
  "success": true,
  "deviceId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
  "agentsIn": 1,
  "mcpsIn": 1,
  "receivedAt": "2026-04-15T12:00:00Z"
}

400

Invalid payload or signature