NagentArtefacts
Dev & Technology
Enterprise and White Glove
Company
Rkvst connects to a Nagent workspace with an API key. Once it is connected, agents can call 24 Rkvst actions, such as "Get App Registration", "Get Asset" and "Get Blob". Nothing is enabled on connect: each action is allowed one at a time, and an action with side effects runs or waits for a person according to the agent's level.
Every operation an agent can call against Rkvst, with input parameters and output schema.
RKVST_DOWNLOAD_EVENT_ATTACHMENTTool to download an attachment from a specified Event on an Asset. Use when you have asset_uuid, event_uuid, and attachment uuid, and want the raw binary content.
Input parameters
UUID of the attachment (omit the 'blobs/' prefix).
UUID of the asset containing the event.
UUID of the event to which the attachment belongs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_APP_REGISTRATIONTool to retrieve details for a given App Registration ID. Use after obtaining the application's UUID to inspect its configuration and credentials.
Input parameters
UUID of the App Registration to retrieve.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_ASSETTool to retrieve details for a given Asset. Use after you have its UUID; set `at_time` to get historical state.
Input parameters
Optional ISO 8601 timestamp to retrieve the Asset's state at a past time
UUID of the Asset to retrieve
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_BLOBTool to retrieve details of a Blob by ID. Use after confirming the Blob ID.
Input parameters
UUID of the Blob to retrieve (accepts 'blobs/{uuid}' as well).
Optional public asset UUID to use when retrieving public attachment metadata without Authorization. If provided, the tool will call the public attachments info endpoint to retrieve the blob metadata.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_EVENTTool to retrieve details of a specified Event. Use when you need full metadata, attributes, and associated trails of an existing event in DataTrails.
Input parameters
UUID of the event to retrieve.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_IAM_SUBJECTTool to retrieve IAM subject details. Use when you need to fetch details for a specific IAM subject by its ID.
Input parameters
Unique identifier (UUID) of the IAM subject to retrieve.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_MEMBERTool to retrieve details for a given Member ID. Use after obtaining a valid member UUID.
Input parameters
UUID of the Member to retrieve.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_PUBLIC_ASSETTool to retrieve details for a public asset. Use when you have a public asset UUID.
Input parameters
UUID of the public asset to retrieve
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_PUBLIC_ASSET_EVENTTool to retrieve a specific public asset event. Use when you have public asset and event UUIDs.
Input parameters
UUID of the event to retrieve
UUID of the public asset
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_TENANCYTool to retrieve details for a specific tenancy. Use after you have a tenancy ID.
Input parameters
Unique identifier of the tenancy. Accepts either raw UUID or the full identity string in the format 'tenant/{UUID}'. Leading/trailing whitespace is ignored.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_LIST_APP_REGISTRATIONSTool to list all App Registrations. Use after acquiring a valid auth token to retrieve the applications registered under the tenant.
Input parameters
Pagination token from a previous call; omit for the first page.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_LIST_ASSET_EVENTSTool to list events for a specified asset. Use after confirming you have the asset UUID.
Input parameters
Order results for certain schemas (e.g., SIMPLEHASHV1)
Maximum number of results per page, must be >= 1
UUID of the Asset to list events for
Token for retrieving the next page of results, obtained from next_page_token in a previous response
Return events with confirmation status at or above this level (e.g., COMMITTED, CONFIRMED)
Filter by asset attribute equality; key->value. Use '*' for presence or '!=*' for absence.
Filter by event attribute equality; key->value. Use '*' for presence or '!=*' for absence.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_LIST_ASSETSTool to list all Assets with optional pagination and filters. Use when you need to retrieve asset metadata in batches via page_size and next_page_token.
Input parameters
Maximum number of assets to return.
Token to retrieve the next page of assets.
Filter by proof mechanism (e.g., 'MERKLE_LOG').
If true, includes 'x-total-count' header in the response.
Filter by asset display name. Use '=' for exact match, '*' for presence, '!=*' for missing.
Filter by asset type (e.g., 'Traffic light').
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_LIST_IAM_SUBJECTSTool to list IAM subjects. Use when you need to retrieve provider-managed subjects, optionally filtering by display name. Use after authenticating the tenant.
Input parameters
Specify sort order for results.
Maximum entries per page.
Token to retrieve the next page of results.
Filter subjects by friendly display name.
Filter subjects by wallet address.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_LIST_MEMBERSTool to list all tenant Members. Use when you need an overview of all users in your tenant.
Input parameters
Filter by member state. Use MEMBER_STATE_ACTIVE to include only active members, MEMBER_STATE_INACTIVE for only inactive members, or MEMBER_STATE_BOTH to include both.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_LIST_PUBLIC_ASSET_EVENTSTool to list events for a specific public asset. Use when you need to retrieve the event history of a public asset after confirming its public availability.
Input parameters
UUID of the public Asset to list events for
Pagination token from a previous call; omit for the first page.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_LIST_PUBLIC_ASSETSTool to list all Public Assets. Use when you need to retrieve all assets made public.
Input parameters
Optional page size to limit number of public events fetched (used as proxy for assets).
Pagination token from a previous call to public events; omit for the first page.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_LIST_TENANCIESTool to list all tenancies. Use after authenticating to retrieve the tenancy records available to the current tenant.
Input parameters
Pagination token from a previous call; omit for the first page.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_PROMOTE_MEMBERTool to promote a tenant member to OWNER role. Use when you need to elevate permissions after verifying the member identity.
Input parameters
UUID of the Member to promote.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_RETRIEVE_ASSET_ATTACHMENT_METADATATool to retrieve metadata for an attachment on a specified Asset. Use after obtaining asset and attachment UUIDs.
Input parameters
UUID of the attachment (no 'blobs/' prefix)
UUID of the asset owning the attachment
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_RETRIEVE_CAPSTool to retrieve resource limit quotas for a specified service. Use when checking quota availability before provisioning resources.
Input parameters
Resource type to return caps for. Allowed values: access_policies, applications, assets, blobs, locations, members.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_RETRIEVE_EVENT_ATTACHMENT_METADATATool to retrieve metadata for an attachment on a specified Event. Use when you have asset_uuid, event_uuid, and attachment uuid and need details like size, hash, and scan status.
Input parameters
UUID of the attachment (omit the 'blobs/' prefix).
UUID of the asset containing the event.
UUID of the event to which the attachment belongs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_SEARCH_EVENTSTool to search events matching filter criteria with pagination. Use when retrieving events by OData filter and paging through large result sets.
Input parameters
Max number of results to return (1-50).
Number of results to skip before returning the page.
OData filter expression. Filterable fields: trails, event_type, origin_tenant, created_by, created_at, ledger_entry/index, ledger_entry/idtimestamp, ledger_entry/content_hash. Example: "trails/any(t: t eq 'Clouseau') and event_type eq 'CREATED'"
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_UPDATE_APP_REGISTRATIONTool to update an application's display name or custom claims. Use after retrieving an App Registration to apply partial updates to its configuration.
Input parameters
New human-readable display name for the Application.
Custom claims to set on the Application for use in access policies.
UUID of the App Registration to update.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
Agents can call 24 Rkvst actions on Nagent, including "Get App Registration", "Get Asset" and "Get Blob". Get App Registration: Retrieve details for a given App Registration ID. Each action is listed on this page with its input parameters and its output.
Rkvst connects with an API key, under your workspace's own connection. Nothing is enabled on connect: each action is allowed one at a time and can be scoped to the agents that need it.
Get App Registration takes 1 required input: app_registration_id. It returns data, error and successful.