attributes_lookup
P73 fast attributes endpoint (PIP-PLAN P3): a full POST /v1/verify
resolve fans out across four lenses (~2s) — fine for preflight, fatal
inside a per-request authorization loop. This endpoint serves the
last-known signed bundle from a single KV read, with the P69 freshness
contract deciding how much to trust it.
Use this tool when:
A policy decision point (OPA, Cerbos, Cedar) needs node attributes on its hot path and can tolerate
valid_until-bounded staleness.An agent re-checks a node it (or anyone) verified recently.
Inputs:
node(path, required): IPv4 address, domain, ASN (AS64500), or entity_slug — same grammar as /v1/verify.
Returns:
The exact verify bundle last cached for the node (lens blocks,
cross_lensverdict,coveragewithvalid_until/stale_if_error, signedreceipt), plusattributes_meta:cached_atandfreshness—fresh(insidevalid_until) orstale(past it, still inside thestale_if_errorwindow; the contract says a consumer may use it rather than fail closed).404when nothing is cached — the node was never verified, or its bundle aged paststale_if_error. POST /v1/verify to (re)observe.The short-lived
sigil_tokenfrom the original verify is never included: bearer capabilities are not re-served.
Cost:
Counts as one request against the daily rate limit.
Latency:
Typical: <100ms (one KV read, no lens fan-out).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| node | Yes |