Skip to main content
Intramedial
AS

Read-only demo account · Enterprise

The Awesome Company, Inc.

All capabilities enabled · unlimited quotas · 42 active agents · 4 workspaces

Preview · Agent identity

Agent identity (demo)

Reference-grade agentic-API admin console. W3C DID Web enrollment, key rotation, revocation. AP2 Verifiable Credential mandates (W3C VC Data Model 2.0 + SD-JWT VC) authorising agents up to spend / invocation caps. SPIFFE workload binding for X.509-SVID + JWT-SVID. Trusted-roots federation list controlling which partner organization DIDs may cross-sign for A2A delegation.

Agent identity

Manage the cryptographic identities your agents use to attest to Intramedial's gateway. W3C DID Web Method DIDs, AP2 Verifiable Credential mandates, SPIFFE workload binding, and A2A trusted-roots federation.

Enrolled agents

3

of 4 total (including revoked)

Active mandates

2

of 3 issued

Trusted roots

2

partner organizations

Active 24h

0

agents at the gateway

Enrolled agents

W3C DID Web Method identities under this workspace. Each agent has a signing key (Ed25519 default, ES256 for FIPS deploys), a rotation history, and an optional SPIFFE workload binding.

Active · 3

  • EU Production runnerActiveworkspace EdDSArotated 1×
    did:web:intramedial.com:agents:eu-prod-runner-2026q2

    n8n production workspace's primary agent. Handles refund processing, daily audit exports.

    Enrolled: 259dLast seen: 160d
  • GitHub Actions release attestorActiveworkspace EdDSA
    did:web:intramedial.com:agents:ci-release-attest

    Signs every release commit via @entpoind/attest-commit GHA. Mandate-VC-gated.

    Enrolled: 190dLast seen: 161d
  • Claude Cowork (sandbox)Activeworkspace EdDSA
    did:web:intramedial.com:agents:sandbox-claude-cowork

    Claude Cowork MCP agent. Read-only against sandbox workspace.

    Enrolled: 172dLast seen: 160d

Deactivated · 1

  • Legacy refund bot (revoked)Deactivatedworkspace EdDSArotated 2×
    did:web:intramedial.com:agents:legacy-refund-bot-q1

    Stripe refund automation. Replaced by EU Production runner with stricter mandate scope.

    Enrolled: 294dLast seen: 168dDeactivated: 167d

AP2 mandates

Verifiable Credential mandates (W3C VC Data Model 2.0 + SD-JWT VC) authorising an agent to take billing-impacting actions up to spend, invocation, and condition limits. Verified at every gateway call via the agent's mandate presentation.

Active · 2

  • Stripe refund bot. Q2 budgetActivebilling_impacting
    did:web:intramedial.com:agents:eu-prod-runner-2026q2 · EU Production runner
    Spend
    $184.50 / $500.00
    Invocations
    47 / 200
    Valid until
    121d
    Last invoked
    160d
    billing.subscription.upgradeentpoind.attest.agent-callentpoind.attest.webhook-deliver
    · Step-up factor: passkey
    · Required DPoP thumbprint: 5q3K9hH8jX2pL6dV9bN1…
  • CI release attest. Q2Activemutation
    did:web:intramedial.com:agents:ci-release-attest · GitHub Actions release attestor
    Invocations
    142 / 500
    Valid until
    99d
    Last invoked
    161d
    entpoind.attest.commit
    · IP CIDR allow-list: 140.82.112.0/20, 143.55.64.0/20

Revoked · 1

  • Legacy refund bot. RevokedRevokedbilling_impacting
    did:web:intramedial.com:agents:legacy-refund-bot-q1 · Legacy refund bot
    Spend
    $123.80 / $250.00
    Valid until
    204d
    Last invoked
    168d
    billing.refund.issue
    Revocation reason: Replaced by EU Production runner with stricter scope (R0058 hardening).

Trusted A2A federation roots

Partner organization DIDs your gateway accepts as cross-signers for A2A-delegated agents. Each root has a maximum accepted safety level and an optional federation-allowed flag for transitive trust.

  • Partner Example Corpbilling_impacting
    did:web:partner.example.com
  • Acme Corpmutation
    did:web:acme-corp.example

Pre-Worker the dashboard simulates DID enrollment + mandate issuance locally so you can stage the cryptographic identity model. Post-Worker the gateway issues real keys + signs the DID Document with its assertion method.