Refresh agent snapshot

Re-probe the agent and update its registry health (online, tools_count, response_time_ms), capability snapshot (inferred type, discovered tools), and compliance verdict (storyboard pass/fail counts). Use after fixing your agent so the registry shows fresh data without waiting for the periodic heartbeat (~1h).

Compliance re-run: when the caller owns the agent or is an AAO admin and the capability probe succeeds, the full storyboard suite can run for several minutes on capability-rich agents with a fresh test session, and agent_storyboard_status is updated. Owner-triggered runs use triggered_by: 'owner_test'; admin-triggered support runs use triggered_by: 'manual'. Badge fan-out reissues verification badges off the new run. If the compliance call fails (timeout, OAuth wall, internal error), the capability/health portion still returns successfully — compliance.ran is false with an error string.

Auth: owner of the agent, AAO admin, or static ADMIN_API_KEY.

Rate limits: 60 seconds per agent URL, 30 requests per user per hour.

POST /api/registry/agents/{encodedUrl}/refresh

Refresh agent snapshot

cURL

curl --request POST \
  --url https://agenticadvertising.org/api/registry/agents/{encodedUrl}/refresh \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://agenticadvertising.org/api/registry/agents/{encodedUrl}/refresh"

headers = {"Authorization": "Bearer <token>"}

response = requests.post(url, headers=headers)

print(response.text)

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

fetch('https://agenticadvertising.org/api/registry/agents/{encodedUrl}/refresh', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://agenticadvertising.org/api/registry/agents/{encodedUrl}/refresh",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://agenticadvertising.org/api/registry/agents/{encodedUrl}/refresh"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://agenticadvertising.org/api/registry/agents/{encodedUrl}/refresh")
  .header("Authorization", "Bearer <token>")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://agenticadvertising.org/api/registry/agents/{encodedUrl}/refresh")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

200

{
  "online": true,
  "tools_count": 123,
  "response_time_ms": 123,
  "inferred_type": "<string>",
  "type_promoted": true,
  "oauth_required": true,
  "checked_at": "<string>",
  "compliance": {
    "ran": true,
    "run_id": "<string>",
    "test_session_id": "<string>",
    "requested_compliance_target": "<string>",
    "adcp_version": "<string>",
    "badge_eligible": true,
    "badge_eligible_adcp_versions": [
      "<string>"
    ],
    "overall_status": "<string>",
    "storyboards_passing": 123,
    "storyboards_total": 123,
    "observations_count": 123,
    "notices_count": 123,
    "error": "<string>"
  },
  "error": "<string>"
}

{
  "error": "<string>"
}

{
  "error": "<string>"
}

{
  "error": "<string>"
}

{
  "error": "<string>"
}

{
  "error": "<string>",
  "retry_after": 123
}

{
  "error": "<string>"
}

Authorizations

bearerAuthoauth2

Authorization · string · header · required

Bearer token in the Authorization header. Two token types are accepted:

• Organization API key (sk_...) issued via the dashboard. Org-scoped, long-lived, for server-to-server use.
• User JWT obtained via the OAuth 2.1 authorization code flow with PKCE. User-scoped, short-lived. Discover the authorization server at /.well-known/oauth-authorization-server and the protected-resource metadata at /.well-known/oauth-protected-resource/api.

Path Parameters

encodedUrl · string · required

URL-encoded agent URL

Example:

"https%3A%2F%2Fvastlint.org%2Fmcp"

Response

200

application/json

Snapshot refreshed

online · boolean · required

tools_count · integer | null · required

response_time_ms · integer | null · required

inferred_type · string · required

Type inferred from discovered tools (sales, creative, signals, governance, etc.) or 'unknown'

type_promoted · boolean · required

True when registry type was upgraded from unknown to inferred_type

oauth_required · boolean · required

checked_at · string · required

compliance · object · required

Compliance re-run summary. The capability/health portion of the response is independent of this block — a failed compliance run still returns the rest of the snapshot.

Show child attributes

error · string