Developer CLI
Make the setup test call
/v1/cli/testOne real request through the gate as the agent (a £1 payment for an agent that pays, otherwise a local tool call), answered by its own rules. The action is recorded as a test, so nobody is notified, and it tidies up after itself: a question for a person is cancelled at once, and an allow is settled as cancelled, which withdraws its receipt. The idempotency key is fixed per agent and the rules as they stand, so calling it again makes no second record (replay: true), and once a rule changes (a second owner confirms it) the test is made afresh rather than replayed. immiscible init uses it.
#Authentication
Agent key
An agent-scoped key (ask_...) bound to exactly one agent, or an OAuth access token (aat_...) issued to an MCP client for that agent, sent as Authorization: Bearer. An agent key may ask, poll and settle. It can never approve, widen a mandate or lift a freeze.