Create an agent record
POST/agents
Staff-side creation of an agent. Bypasses public self-registration but still requires ZFA approval + KYC before the agent can transact. Records agent.create audit event. Requires the agent:write permission.
Request
Responses
- 201
- 400
- 401
- 403
- 409
- 429
- 500
Newly-created Agent record.
Validation error on payload.
Missing or invalid access token.
Caller lacks the required permission.
Duplicate email, phone or IRA number.
Rate limit exceeded. Global default is 120 requests/minute per IP; auth-flow, OTP, self-registration, WebAuthn, IRA lookup, and public-lead endpoints carry tighter per-endpoint limits. Retry after the delay indicated by the Retry-After header.
Response Headers
Seconds to wait before retrying.
Unhandled server error. The response carries a meta.requestId correlator you can hand to platform operations to trace the failure through structured logs and the hash-chained audit trail. Retry with the same Idempotency-Key header if the endpoint accepts idempotency.