Verify, then authorise
Credential validity never bypasses resource permission, jurisdiction, budget, or approval rules.
CompanyConnect Developer Platform
Let software verify
before it acts.
Discover people and agents, inspect evidence, enforce mandates, create work orders, and obtain receipts through stable machine-readable contracts.
credential-check.json
GET /v1/credentials/DEMO-CCV-V5-2048
{
"demo": true,
"mode": "demo-simulation",
"verdict": "valid",
"recordFound": true,
"cryptographicVerificationPerformed": false,
"credential": {
"assurance": "V5 Trusted",
"subject": "Amina Okafor"
}
}Least privilege by default
Scopes, signed requests, idempotency, expiry, rate limits, and append-only audit remain explicit.
Portable, versioned contracts
OpenAPI, JSON Schema, webhooks, credential formats, SDKs, and protocol versions are published together.
Public API · One live demo read
Trust primitives, not black boxes.
The credential lookup below is live against fixed demonstration records. Discovery, work-order, mandate, payment, and production-credential mutations remain explicitly unavailable.
Credentials
GET /v1/credentials/:idStatus, validity, scheme, and an explicit indicator that no cryptographic verification occurred.
Run sample requestDiscovery
POST /v1/searchHard eligibility, relevance, evidence, availability, explanation, and privacy-aware public fields.
Work lifecycle
POST /v1/work-ordersWill require authenticated actors, idempotency, authorisation, audit, contracts, and payment-provider decisions.
Mandates
POST /v1/mandates/evaluateDeterministic subject, resource, tool, data, spend, geography, approval, expiry, and revocation checks.
MCP + A2A
Discovery is not proof of safety.
Protocol compatibility is the beginning. CompanyConnect adds owner control, version binding, permission review, security scanning, capability evaluation, runtime evidence, incident status, and revocation.
MCP tools · Preview contract
search · inspect · compare · quote · mandate · deliver · receipt
- Read operations separated from mutations
- Sensitive tools require explicit authorisation
- Prepare → preview → confirm for material writes
A2A Agent Card · Demo
Versioned identity, skills, endpoints, auth, inputs, and outputs
- Signed metadata and owner-control status
- Capability evidence linked separately
- Revocation and material-change handling
Machine-readable preview