IsMyAgentLegal Admin Read API¶
Standard: ASD-STE100 Simplified Technical English
Use these endpoints to read submitted agents and their assessment output.
They require an enabled, approved super-admin account. Send its API key in
X-API-Key. Keep the key on the server. Integration keys with the ialb_
prefix do not grant admin access.
| Method | Path | Result |
|---|---|---|
| GET | /api/v1/ismyagentlegal/admin/leads |
The list equivalent to the All Agents page |
| GET | /api/v1/ismyagentlegal/admin/agents/{agent_id}/report |
One agent's full report view |
export ADMIN_API_KEY='YOUR_SUPER_ADMIN_API_KEY'
export API_HOST='https://app.carveragents.ai'
export AGENT_ID='YOUR_AGENT_UUID'
curl --fail-with-body --silent --show-error \
-H "X-API-Key: $ADMIN_API_KEY" \
"$API_HOST/api/v1/ismyagentlegal/admin/leads?sender_type=gtm"
curl --fail-with-body --silent --show-error \
-H "X-API-Key: $ADMIN_API_KEY" \
"$API_HOST/api/v1/ismyagentlegal/admin/agents/$AGENT_ID/report"
The list accepts optional source and sender_type filters. It returns at most
500 leads, newest first. Each lead contains metadata and an agents array with
the UUID, name, description, and readiness of each agent.
The report returns agent, organization_name, and lead_key. It includes
agent.ready, agent.status, agent.totals, and agent.acts[].obligations[].
The obligation wording is in text. Check readiness before you use a result.
The report omits ruled-out acts and acts with no active or possible obligations.
Its rows can include inactive obligations. It does not expand the mapper's
stored coverage.
Both v1 endpoints read existing records. The report does not create a missing
status link. If no lead is linked, lead_key is null.
A missing or invalid key returns 401. An account without super-admin access,
or an unapproved account, returns 403. An unknown, deleted, or malformed agent
UUID returns 404 on the report endpoint.
The corresponding v2 endpoints retain bearer authentication for the admin website. The v2 report can create a missing status link.
Customer tiers¶
Each agent in the leads response includes customer_tier: bronze, silver,
or gold, with bronze as the default. Super admins can change an agent's tier
in All Agents and an organization's default in Organizations. The dashboard's
write endpoints use bearer authentication; they are separate from this read API.
See twin request contract 1.7
for the write API bodies and the resulting pending state and doorbell behavior.