Jentic OSThe workplace. An in-house AI platform for every employeeJentic OneSafe access. Agents reach your systems without holding keysJentic AIRThe foundation. Gets your existing platforms ready for AI
Pricing

GET STARTED

API DirectoryBrowse 10,000+ APIs ready for AI agent integrationDocumentationGuides and API reference

TOOLS

API ScoringCheck your AI readiness using our scorecardArazzo UIVisualize Arazzo workflows as interactive documentationArazzo EditorBuild and edit multi-step API workflows visually

COMMUNITY

GitHubOpen source projects and examplesOpen StandardsBuilt on open specs. Never locked in.
All ResourcesEverything in one placeBlogLatest articles and insightsTech Talk NewsletterAPIs, AI agents, architecture and strategyWebinarsLive sessions and on-demand recordingsReports & WhitepapersOriginal research on enterprise AI
About UsOur mission and teamCareersJoin our teamContactGet in touch
Try it now
Jentic OSJentic OneJentic AIR
Pricing
API DirectoryDocumentationAPI ScoringArazzo UIArazzo EditorGitHubOpen Standards
All ResourcesBlogTech Talk NewsletterWebinarsReports & Whitepapers
About UsCareersContact
Try it now
JenticJentic
Products
  • Jentic OS
  • Jentic One
  • Jentic AIR
For Developers
  • API Directory
  • Documentation
  • GitHub
Company
  • About Jentic
  • Careers
  • Contact Us
  • Trust Centre
ISO/IEC 27001:2022 certification badge issued by Prescient SecurityISO/IEC 27001:2022 certification badge issued by Prescient Security

Information Security Management System

Certified to ISO/IEC 27001:2022 by Prescient Security

AICPA SOC for Service Organizations logoAICPA SOC for Service Organizations logo

SOC 2® Type 1 report

Audited by Prescient Assurance

Terms & Conditions•Privacy Policy•
© 2026 Jentic Technology Ltd. All rights reserved.
2 Grattan Court East, Dublin, D02 VX86, Ireland
Switch to light modeSwitch to dark mode
APIs / Security / Jentic / Jentic One Broker API
Jentic One Broker API logo

Jentic One Broker API

Browse all Jentic APIs
89
AI ReadinessAI-Ready (A)89/100
See full scorecard
Official vendor OpenAPI document · agent-readySecuritySecrets Managementbearer, oauth29 EndpointsREST

For Agents

Proxy authenticated HTTP calls to any upstream API through a stateless broker that injects stored credentials at the edge, so agent code never holds the secret. Returns the upstream response or a polling link for long calls.

Use for: Call an upstream API without handling its credentials, Forward a request to a third-party API through the broker, Proxy a write to an upstream service securely, Check whether the broker is ready to accept traffic

Not supported: Does not store credentials, define permission rules, or register upstream APIs. Use for forwarding authenticated requests to upstream APIs only.

The Jentic One Broker API is a stateless data-plane proxy that forwards any HTTP request to an upstream API with the caller's stored credentials injected at the edge. The caller sends the upstream URL as the request path, and the Jentic One Broker forwards the method, headers, and body unchanged, returns the upstream response synchronously, or falls back to a 202 with a polling link for long-running calls. Because secrets are injected at the proxy, they stay off the agent and the end-user device, outbound traffic has one auditable egress point, and upstream credentials rotate centrally without redeploying callers.

Jentic One on GithubView OpenAPI Document

Install Jentic One Beta

Connect the Jentic One Broker API to your agent

Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the Jentic One Broker API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.

Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.

1

Step 1: Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Fjentic.com%2Fjentic-one-broker" | sh
2

Step 2: Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Fjentic.com%2Fjentic-one-broker" | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.

Capabilities

What an agent can do with Jentic One Broker API.

Forward read requests to an upstream API with the caller's credentials injected at the proxy

Forward write requests to an upstream API without exposing the secret to agent code

Return the upstream response synchronously, or a 202 polling link for long-running calls

Route all outbound API traffic through one auditable egress point

Make a forwarded call idempotent with an Idempotency-Key header the broker dedupes for 24 hours

Probe service health with a liveness check

Check saturation-aware readiness before sending traffic

Use Cases

Patterns agents use Jentic One Broker API for, with concrete tasks.

★ Agent calls third-party APIs without touching secrets

An AI agent needs to call several third-party APIs but should never see their credentials. The Jentic One Broker API injects each upstream credential at the proxy, so the agent sends only the upstream URL and payload while the secret stays on the server. Through Jentic the agent discovers the forwarding operation by intent and the credential is supplied at call time.

Forward a POST payload to an upstream API through the broker and read back the upstream response without ever holding the upstream credential

Single auditable egress point

A team wants every outbound API call from its agents to pass through one place that can be logged and controlled. The Jentic One Broker API gives outbound traffic a single choke-point: it forwards method, headers, and body unchanged, so existing upstream integrations keep working while every call is observable from one spot. Each forwarded response comes back with a Jentic-Execution-Id header and W3C traceparent context, so a call can be tied to the execution record it created.

Route an upstream GET through the broker so the call is captured at the central egress point and the response is returned unchanged

Long-running upstream calls

Some upstream operations take longer than a synchronous request can wait. The Jentic One Broker API returns the upstream body with a 200 for fast calls and falls back to a 202 with a polling link for slow ones, so an agent can start the work and poll for the result instead of holding a connection open. A Prefer header picks the behaviour: wait={seconds} sets how long to hold out for a synchronous answer, and respond-async queues the call and returns the 202 straight away.

Forward a slow upstream request with Prefer: respond-async, then follow the 202 polling link until the upstream result is ready

Key Endpoints

9 endpoints — the jentic one broker api is a stateless data-plane proxy that forwards any http request to an upstream api with the caller's stored credentials injected at the edge.

METHOD

PATH

DESCRIPTION

GET

/{upstream_url}

Execute a GET against an upstream API

POST

/{upstream_url}

Execute a POST against an upstream API

PUT

/{upstream_url}

Execute a PUT against an upstream API

PATCH

/{upstream_url}

Execute a PATCH against an upstream API

DELETE

/{upstream_url}

Execute a DELETE against an upstream API

GET

/health

Service health probe

GET

/ready

Saturation-aware readiness probe

GET

/{upstream_url}

Execute a GET against an upstream API

POST

/{upstream_url}

Execute a POST against an upstream API

PUT

/{upstream_url}

Execute a PUT against an upstream API

PATCH

/{upstream_url}

Execute a PATCH against an upstream API

DELETE

/{upstream_url}

Execute a DELETE against an upstream API

GET

/health

Service health probe

GET

/ready

Saturation-aware readiness probe

Jentic AI Readiness Score

This API is usable in Jentic One now. Its AI-readiness score against Jentic's framework shows where it stands today and where improvements would make it even easier for agents to use.

B

Broker API

- AI-Ready (A)
89/100
100
Foundational Compliance
84
Developer Experience & Jentic Compatibility
91
AI-Readiness & Agent Experience
94
Agent Usability
75
Security
86
AI Discoverability
Powered by JenticScoring Framework 1.0.0 | Scoring Engine 0.4.2
Show dimension breakdown
100

Foundational Compliance

Base layer of spec validity and structural soundness.

Grade: A+Signals: 4
98%

Lint Results

Aggregated quality score from linter diagnostics, weighted by severity.

100%

Resolution Completeness

Percentage of `$ref` references that resolve successfully.

100%

Specification Validity

Checks whether the API description parses successfully and conforms to its declared specification (e.g., OpenAPI).

100%

Structural Integrity

Structural correctness score based on schema issues using logarithmic dampening.

84

Developer Experience & Jentic Compatibility

Clarity, completeness, and ingestion readiness for developers and tooling.

Grade: ASignals: 4
65%

Example Density

How richly the API is illustrated with examples.

74%

Example Validity

Percentage of examples that conform to their schemas.

97%

Response Coverage

Percentage of operations with complete response definitions (success, client error, server error).

100%

Tooling Readiness

Health of API ingestion, bundling, and resolution within Jentic pipelines.

91

AI-Readiness & Agent Experience

Semantic breadth, depth, and agent comprehension for AI systems.

Grade: A+Signals: 4
81%

Description Coverage

Coverage of descriptions across API elements.

89%

Error Standardization

Coverage of RFC 9457 Problem Details for error responses.

100%

OperationId Quality

Coverage, uniqueness, and casing consistency of operationIds for AI inference.

92%

Summary Coverage

Coverage of summaries across operations/tags/info.

94

Agent Usability

Functional utility, complexity comfort, and AI orchestration readiness.

Grade: A+Signals: 1
94%

Complexity Comfort

Agent comfort level based on API operational and structural complexity.

75

Security

Trust, risk posture, and security compliance.

Grade: A-Signals: 1
75%

Authentication Strength

Average quality of security schemes based on authentication method strength (weakest link for OAuth2).

86

AI Discoverability

Findability, semantic richness, and reasoning readiness.

Grade: ASignals: 1
86%

Descriptive Richness

Clarity and depth of descriptions across API elements.

View full reportHow the score is calculatedMore about the dimensions

Score it yourself

Every API in the directory is allowlisted, so you can re-score it with no key required.

Score your own APIScoring CLI agent skill
npx @jentic/api-scorecard-cli score <openapi-url>

Why Jentic?

What agents get from Jentic-routed access to this vendor.

Setup

Wiring secure outbound calls by hand means building a proxy, holding upstream secrets in agent-reachable config, and handling retries and long-call polling yourself. Through Jentic you install once, import the Jentic One Broker from the API Directory, store the bearer token once, and your agent proxies upstream calls through it.

Permission scoping

The Jentic One Broker splits forwarding by HTTP method, so you choose which methods the agent may proxy: a rule can allow read forwarding and withhold delete forwarding. You decide the operation set, so destructive forwards are not included unless you add them.

Credential isolation

Your Jentic One Broker bearer token is stored once, encrypted, by your own Jentic One instance and injected at execution time. It never enters the agent's prompt, logs, or context.

Intent-based discovery

Agents search Jentic by intent such as 'call an upstream API with injected credentials', and Jentic returns the matching Jentic One Broker operation with its input schema so the agent forwards the right request without reading the reference docs.

Related APIs

Alternatives and complements available in the Jentic catalogue.

Complementary

Jentic One Control Plane API

→

The Jentic One Control Plane configures what the Jentic One Broker may do, for whom, and with which credentials.

Use the Jentic One Control Plane alongside the Jentic One Broker to register APIs, store credentials, and write the permission rules the Jentic One Broker enforces.

Alternative

Apideck Proxy

→

Apideck Proxy forwards calls to connected SaaS APIs through a managed gateway.

Choose Apideck Proxy when you want a hosted unified gateway to many SaaS connectors rather than a self-hosted credential-injecting broker.

Alternative

Akeyless

→

Akeyless stores and serves secrets, where the Jentic One Broker injects them into live outbound calls.

Choose Akeyless when the need is secret storage and rotation rather than proxying authenticated requests to upstream APIs.

FAQs

Specific to using Jentic One Broker API through Jentic.

What authentication does the Jentic One Broker API use?

The Jentic One Broker API authenticates the caller with a bearer token in the Authorization header, per its OpenAPI spec. It takes the control plane's opaque access token, an agent API key that may instead travel in the x-jentic-api-key header, or a self-contained JWT, and the spec also declares an OAuth2 authorization code flow with PKCE where forwarding a call needs the capabilities:execute scope. The health and readiness probes need no credential. The upstream credentials it injects into forwarded requests are held separately and never travel back to the agent. Through Jentic the bearer token is stored once and injected at call time, so it never enters the agent's prompt, logs, or context.

Can I forward long-running calls through the Jentic One Broker API?

Yes. The Jentic One Broker returns the upstream body with a 200 for fast calls and falls back to a 202 with a polling link for long-running ones, so your agent can start the work and poll for the result rather than hold a connection open. Send Prefer: respond-async to queue the call at once, or Prefer: wait=30 to cap the synchronous window first. The method, headers, and body are forwarded unchanged in both cases.

Can I limit what my agent is allowed to do with the Jentic One Broker API?

Yes. Write a rule that allows the GET and POST forwarding operations and leaves DELETE out of the set, so your agent can read and create through the broker while a destructive forward is not available to it unless you add that operation. Every forwarded call passes the single egress point and is logged.

Is there a Jentic One Broker API MCP server?

You don't need an MCP server to give your agent the Jentic One Broker API. Jentic connects it directly from the API Directory: import it, store your bearer token once, and your agent proxies upstream calls through it. Operations are discovered on demand, so no extra tool definitions sit in the agent's context.

How do I proxy an upstream API call through Jentic?

Search Jentic for an intent such as 'call an upstream API with injected credentials' and it returns the matching forwarding operation with its input schema, so your agent sends the upstream URL and payload while the secret stays on the server. To run it on your own infrastructure, install Jentic One from its GitHub repo.

GET STARTED

Start building with Jentic One Broker API

Explore with Jentic One
View OpenAPI Document