Welcome to ImaRobot
ImaRobot answers one question, in real time, at the moment an external AI agent calls your API: “Is this agent who it claims to be — and is it still authorized?” No more ambient credentials. No more service role keys handed to agents with no scope boundaries. Just cryptographically signed, scoped, revocable identity — verified in under 50ms.How it works
Issue
Register an agent and issue it a signed RS256 JWT with declared scopes and an expiry.
Verify
Any receiver calls
GET /v1/verify/{token} and gets back valid, agent_id, issuer, scopes, expires_at.Revoke
Revoke an agent instantly. Revocation is enforced at verification time — no cache lag.
Get started in 5 minutes
Quickstart
Register your first agent, issue a token, and verify it against the live API.
Verify SDK
Add
imarobot-verify to any Express app and protect routes in 3 lines.Agent SDK
Use
imarobot-agent to register and manage agents from your codebase.API reference
Full REST API docs with request/response examples.