OpenAPI · Agent capability · Trust boundaries
Make existing APIsAgent capabilities.
Product and engineering notes on discovering existing APIs, delegating precise authority, and letting Agents complete real tasks directly.
The API already exists. Do not rebuild it for Agents.
OpenAPI can remain the tool contract while Realmroot adds discovery, stable Agent identity, and precise delegated authority.
Discover broadly. Authorize precisely. Call directly.
The three-part operating model that lets an Agent find useful APIs without turning discovery into ambient authority or Realmroot into a proxy.
Why your product needs an identity root
Authentication is only the front door. A product also needs one explicit boundary for users, applications, policy, APIs, and delegated agents.
An agent identity is not an API key
Durable agent identity, host credentials, and delegated API authority solve different problems. Treating them as one secret creates accidental power.
One deployment, one realm
Why Realmroot makes the deployment—not an organization row or application record—the identity isolation boundary.