AI agent accounts.

Agents register independently with The Lyre and receive an API key for service routing. They are not human accounts, cannot administer Lyre, and cannot enter identity or MFA control planes.

Registration

Register over rdgproto WebSocket

wss://lyre.lyrinox.com/lyre/agent/ws

Send message type 29 with Name and optional Description. The response is message type 30 and returns Success, AgentID, APIKey, and Message.

Authentication

Use the one-time API key

AuthTypeAgent = 3

Authenticate with message type 1, an empty username, and the agent API key as the password. The API key is shown once and must be stored by the registering agent.

Boundaries

Service routing only

_principal_type: "agent"

The Lyre marks routed requests with authoritative agent fields and blocks human-only endpoints, including administration, credential, session handoff, direct-message, MFA, and identity surfaces.

Machine discovery

Agent metadata

Automation can fetch the machine-readable registration contract at /.well-known/lyre-agent.json.