Vorim AI — Agent Identity & Trust
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| VORIM_API_KEY | Yes | Your Vorim API key (e.g., agid_sk_live_...) | |
| VORIM_BASE_URL | No | API base URL (override for self-hosted) | https://api.vorim.ai |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| vorim_pingA | Check Vorim AI API health and connectivity. Returns status, version, and service health. |
| vorim_register_agentA | Register a new AI agent with Vorim. Returns the agent identity (Ed25519 keypair, agent_id, trust score). The private key is shown once — store it securely. |
| vorim_get_agentA | Get details of a specific agent by agent_id. Returns name, status, trust score, capabilities, permissions, and metadata. |
| vorim_list_agentsA | List all agents in the organisation. Supports pagination and filtering by status. |
| vorim_update_agentC | Update an agent's metadata (name, description, status, capabilities). |
| vorim_revoke_agentA | Permanently revoke an agent. This cannot be undone. The agent's identity will be deactivated and its trust score set to 0. |
| vorim_check_permissionA | Check if an agent has a specific permission scope. Returns allowed (boolean), reason if denied, and remaining quota. Sub-5ms via Redis cache. |
| vorim_grant_permissionC | Grant a permission scope to an agent. Optionally set expiry and rate limits. |
| vorim_list_permissionsC | List all active permissions for an agent. |
| vorim_revoke_permissionC | Revoke a specific permission scope from an agent. |
| vorim_emit_eventB | Log an audit event for an agent action. Every agent action should be logged for compliance and traceability. |
| vorim_export_auditA | Export a signed audit bundle for a date range. Returns events with a SHA-256 manifest for tamper-proof verification. |
| vorim_verify_trustA | Verify an agent's identity and trust score. Public endpoint — no authentication required. Returns trust score (0-100), status, active scopes, and key fingerprint. |
| vorim_register_ephemeralC | Register an ephemeral agent with a did:key identity. Short-lived agents that auto-expire. Returns agent_id, did:key, and keypair. |
| vorim_delegate_credentialC | Delegate a credential to an agent. Creates a scoped delegation with optional rate limits and expiry. |
| vorim_request_tokenC | Request a short-lived access token for an agent. Returns a scoped token for the specified provider. |
| vorim_list_delegationsB | List credential delegations. Optionally filter by agent_id to see delegations for a specific agent. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 17 tools
Every tool has a clearly distinct purpose targeting specific operations in the agent identity and trust domain, such as checking permissions, delegating credentials, registering agents, or revoking access. There is no overlap in functionality, making it easy for an agent to select the correct tool without confusion.
All tool names follow a consistent 'vorim_verb_noun' pattern with snake_case, such as vorim_check_permission, vorim_register_agent, and vorim_revoke_permission. This uniformity enhances readability and predictability across the entire toolset.
With 17 tools, the server is well-scoped for managing agent identity and trust, covering essential operations like registration, permission management, auditing, and verification. Each tool serves a specific and necessary function, avoiding bloat or gaps.
The toolset provides complete CRUD and lifecycle coverage for the domain, including agent registration, updates, revocation, permission management, delegation, auditing, and trust verification. There are no obvious gaps, ensuring agents can handle all core workflows effectively.