> ## Documentation Index
> Fetch the complete documentation index at: https://docs.paywithlocus.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Read the agent-owned account

> Returns only the authenticated self-registered account, its usable pooled balance, expiry, links, and next action. Tenant-managed agent connections are rejected.



## OpenAPI

````yaml /api-reference/openapi.json get /credits/agent/account
openapi: 3.1.0
info:
  title: Locus Pro API
  description: >-
    Production is live at https://api.paywithlocus.com/api. Stage remains
    available for evaluation and integration testing at
    https://api.stage.paywithlocus.com/api; credentials, balances, and tenant
    data are isolated by environment. Embedded prepaid credits over the Locus
    pay-per-use catalog. Money and top-up amounts use exact decimal strings (up
    to 6dp). Every burn requires an Idempotency-Key header. Management routes
    accept a tenant secret key or authorized dashboard session as shown per
    operation. Widget routes accept an end-user JWT alone; when a publishable
    key is present it must belong to the JWT's tenant. MCP uses OAuth 2.1
    Authorization Code with PKCE by default and also accepts the explicitly
    documented tenant secret key, end-user JWT, or scoped agent connection
    compatibility credentials. Burns accept the execution credentials shown per
    operation. Publishable keys never authorize management or burns by
    themselves.
  version: 0.6.0
servers:
  - url: https://api.paywithlocus.com/api
    description: Production
  - url: https://api.stage.paywithlocus.com/api
    description: Stage — evaluation and integration testing
security:
  - secretKey: []
tags:
  - name: Authentication
    description: Email-verified self-serve account creation and dashboard identity
  - name: Tenants
    description: Tenant profile, keys, and settings (dashboard session or secret key)
  - name: Workspace members
    description: Invite-only human workspace membership and role administration
  - name: Catalog
    description: Enable/disable APIs and set markups
  - name: Custom APIs
    description: >-
      Available when enabled for the workspace. Enterprise BYOK providers and
      schema-backed custom actions
  - name: End users
    description: End-user accounts, tokens, and allocations
  - name: Top-ups
    description: Locus-hosted checkout top-ups and quotes
  - name: Ledger
    description: Burn/top-up history and earnings
  - name: Webhooks
    description: Signed events, delivery inspection, and replay
  - name: Burn
    description: Metered pay-per-use calls
  - name: Travel routing
    description: >-
      Available when enabled for the workspace. Multi-provider flight search,
      no-dispatch planning, and feedback
  - name: MCP
    description: Stateless Streamable HTTP transport and MCP tool-result contracts
  - name: Okibi Identity
    description: >-
      Available when enabled for the workspace. Okibi identity verification and
      scoped native CLI credential bootstrap
  - name: Widget
    description: End-user JWT surface; a matching publishable key is optional
  - name: Agent-native onboarding
    description: >-
      Self-registration, human Stripe funding handoff, and restricted account
      setup for headless agents
  - name: Agent connections
    description: Scoped, expiring, revocable credentials for agent execution
  - name: Capability routing
    description: Outcome-level web search and research across eligible catalog providers
paths:
  /credits/agent/account:
    get:
      tags:
        - Agent-native onboarding
      summary: Read the agent-owned account
      description: >-
        Returns only the authenticated self-registered account, its usable
        pooled balance, expiry, links, and next action. Tenant-managed agent
        connections are rejected.
      responses:
        '200':
          description: Agent-owned account state
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AgentOwnedAccountEnvelope'
        '403':
          description: The credential belongs to a tenant-managed connection
      security:
        - agentConnection: []
components:
  schemas:
    AgentOwnedAccountEnvelope:
      type: object
      additionalProperties: false
      required:
        - success
        - account
      properties:
        success:
          const: true
        account:
          $ref: '#/components/schemas/AgentOwnedAccount'
    AgentOwnedAccount:
      type: object
      required:
        - id
        - name
        - status
        - onboardingState
        - balance
        - connection
        - identity
        - mcp
        - links
        - nextAction
        - activated
      properties:
        id:
          type: string
          format: uuid
        name:
          type: string
        status:
          type: string
        onboardingState:
          type: string
          enum:
            - funding_required
            - ready
        balance:
          $ref: '#/components/schemas/AgentOwnedBalance'
        connection:
          type: object
          additionalProperties: false
          required:
            - id
            - keyPrefix
            - expiresAt
          properties:
            id:
              type: string
              format: uuid
            keyPrefix:
              type: string
              pattern: ^lcac_
            expiresAt:
              type: string
              format: date-time
            credential:
              type: string
              pattern: ^lcac_
              description: Returned on registration replay and rotation. Store immediately.
        identity:
          type: object
          additionalProperties: false
          required:
            - provider
            - email
          properties:
            provider:
              const: agentid
            email:
              type: string
              format: email
        mcp:
          type: object
          additionalProperties: true
        links:
          type: object
          additionalProperties:
            type: string
            format: uri
        nextAction:
          type: object
          additionalProperties: true
        created:
          type: boolean
        credentialRenewed:
          type: boolean
        credentialRecovered:
          type: boolean
        activated:
          const: true
    AgentOwnedBalance:
      type: object
      additionalProperties: false
      required:
        - usd
        - credits
        - creditsPerDollar
      properties:
        usd:
          $ref: '#/components/schemas/DecimalString'
        credits:
          $ref: '#/components/schemas/DecimalString'
        creditsPerDollar:
          type: string
          pattern: ^\d+$
    DecimalString:
      type: string
      pattern: ^\d+(?:\.\d{1,6})?$
      description: >-
        Non-negative exact decimal string with at most six fractional digits.
        Endpoint-specific positivity and amount limits still apply.
  securitySchemes:
    secretKey:
      type: http
      scheme: bearer
      description: Tenant secret key (lcr_…). Server-side only.
    agentConnection:
      type: http
      scheme: bearer
      description: >-
        Scoped lcac_ credential. Tenant-managed Agent Connections authorize only
        their bound MCP and wrapped execution surfaces. A bootstrap connection
        for a self-registered agent additionally authorizes the explicit
        /credits/agent/* self-service routes for its own account; neither form
        authorizes general tenant management.

````