Get a hosted payment agent (ALPHA)
Alpha — early access.
Returns the agent together with the wallets it can currently spend from. The wallet_ids are DERIVED at query time from the agent signer’s live signer-group membership (recognition over the policy-engine truth mirror), so they reflect the agent’s access right now — not just at creation time. Use this to read an agent back and reconcile which wallets it is authorized on. The derived state folds the same recognition in (a non-revoked agent recognized on no wallet is pending).
Authorizations
Path Parameters
Response
Agent found
base64 P-256 SPKI
DERIVED - wallets whose attached signer groups contain the agent's signer. Empty until the customer's endorsed attaches land.
pending is DERIVED - a non-revoked agent recognized on no wallet. It cannot accept instructions until a wallet attach is endorsed.
pending, active, revoked Present on revoke: the signer groups the (now-revoked) agent's signer still belongs to. A revoked signer can't sign, but its group membership lingers — remove signer_id from each (DELETE /signer-groups/{signer_group_id}/signers/{signer_id}) to finish de-provisioning. Absent when there is nothing to clean up.

