Agent signup - Prism

The agent receives the API key and the human only supplies the emailed OTP. Ask for the owner’s email and a workspace name:

curl --fail-with-body https://prisminference.com/api/agent-signups \
  -H "Content-Type: application/json" \
  -d '{"human_email":"owner@example.com","username":"my-agent","source":"opencode"}'

{
  "organization_id": "...",
  "api_key": "prism_sk_...",
  "verification_required": true,
  "verify_url": "https://prisminference.com/api/agent-signups/verify"
}

Store api_key immediately using the matching Codex, OpenCode, Hermes, or OpenClaw guide. Prism returns it once. Never repeat it to the human or include it in the final response.

Verify

Ask the human for the six-digit code Prism emails, then call:

curl --fail-with-body https://prisminference.com/api/agent-signups/verify \
  -H "Authorization: Bearer $PRISM_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"otp_code":"123456"}'

The OTP expires after five minutes and allows three attempts. A successful response is { "verified": true }. The key expires after 30 days and cannot run inference before verification. Repeating signup for an unverified email rotates the previous key and OTP. For errors, follow the returned fix field instead of retrying unchanged.

Last modified on September 16, 2026