Register a runner
Enrolls a runner into the fleet and assigns its policy. Requires an existing operator credential (Clerk JWT or agt_t API key with admin role); there is no enrollment token. Mints a durable agt_r runner token, returned once, and stores only its SHA-256 hash. The host applies the policy assigned here and never declares its own.
Authorizations
Obtain a token via the CLI auth flow (POST /v1/auth/sessions) or GitHub OAuth
Body
Enrollment input. The operator ASSIGNS the policy here — the selection is an assignment the host must satisfy, not a description of the host.
Operator-supplied host identifier for this runner (1-256 chars).
1 - 256The policy assigned to one runner. agentsfleet delivers it to the host on enrollment and on every heartbeat. The host never declares its own policy.
Free-form operator labels for placement/grouping.
Response
Runner registered; the bearer token is returned exactly once.
The durable runner identity plus its bearer token. The runner_token is returned exactly once; the server stores only its SHA-256 hash.
The minted runner's id (UUIDv7).
The agt_r-prefixed bearer token the runner presents on every later call. Returned once; never retrievable again.
The policy assigned to one runner. agentsfleet delivers it to the host on enrollment and on every heartbeat. The host never declares its own policy.