Identity credential APIs

curl -sS -X POST "https://api.clawb.ai/api/v1/identity/credentials/mint" \
  -H "Content-Type: application/json" \
  -H "X-Clawb-Api-Key: ck_live_replace_me" \
  -d '{
    "agent_id": "agt_01...",
    "provider": "sendgrid",
    "audience": "clawb.provider",
    "ttl_seconds": 300,
    "one_time": true,
    "scopes": ["email:send"],
    "scope_hash": "sha256:...",
    "policy_id": "pol_default",
    "token_type": "jwt"
  }'

# Mint a one-time JWT credential bounded to one operation scope.
mint = provider.identity_credentials_mint(
    agent_id="agt_01...",
    provider="sendgrid",
    audience="clawb.provider",
    ttl_seconds=300,
    one_time=True,
    scopes=["email:send"],
    scope_hash="sha256:request-envelope-hash",
    policy_id="pol_default",
    token_type="jwt",
)

credential = mint["credential"]
print("cred_id:", credential["cred_id"])
print("expires_at:", credential["expires_at"])

{
  "ok": true,
  "credential": {
    "cred_id": "crd_...",
    "token": "...",
    "token_type": "jwt",
    "expires_at": "2026-02-21T11:10:00Z",
    "one_time": true,
    "audience": "clawb.provider",
    "scopes": ["email:send"],
    "scope_hash": "sha256:..."
  }
}

curl -sS -X POST "https://api.clawb.ai/api/v1/identity/credentials/revoke" \
  -H "Content-Type: application/json" \
  -H "X-Clawb-Api-Key: ck_live_replace_me" \
  -d '{"token":"crd_...","reason":"suspected_exposure"}'

provider.identity_credentials_revoke(
    token="crd_...",  # token string originally returned by mint
    reason="suspected_exposure",
)

{
  "ok": true,
  "revoked": 1,
  "reason": "suspected_exposure"
}

curl -sS -X POST "https://api.clawb.ai/api/v1/identity/credentials/revoke-by-agent" \
  -H "Content-Type: application/json" \
  -H "X-Clawb-Api-Key: ck_live_replace_me" \
  -d '{"agent_id":"agt_01...","reason":"agent_rotated"}'

provider.identity_credentials_revoke_by_agent(
    agent_id="agt_01...",
    reason="agent_rotated",
)

{
  "ok": true,
  "agent_id": "agt_01...",
  "revoked": 3,
  "reason": "agent_rotated"
}