Agent identity
Agent name, operator organization, canonical website, contact email, and purpose of access.
AGENT AUTH
Agent Registration
Public website discovery endpoints do not require OAuth bearer tokens. Private operational API access is not self-service and requires Pinpoint Accounting review and approval.
CLAIMS
Registration information requested for private API review
Credential type
Preferred credential type: OAuth2 client credentials or private_key_jwt for approved private integrations.
Scope request
Requested scopes, data minimization explanation, and whether the agent will submit leads on behalf of a user.
REVOCATION
Credential revocation
Pinpoint may revoke private API credentials if an agent misrepresents users, submits spam, violates user consent, requests unnecessary data, or fails to follow Pinpoint's public agent policy.