FTAI Testnet v1

The hosted testnet is a bounded integration sandbox for signed enrollment, authority constraints, one-use permits and revocation. It is not a full production mirror or a security certification. Production API conformance, organisation approvals and Cybersphere are exercised by the local integration suites.

• Separate tables, FTAI-TEST-<UUID> identifiers and signature message domains.
• Receipts carry aud: FTAI-TESTNET-ONLY, environment: testnet, productionValid: false, a :testnet issuer suffix and -testnet key ID suffix. Never accept them as production credentials.
• Max 10 spaces per owner, 20 identities per space and 200 permits per identity. Space access expires after seven days; its records remain until the owner deletes them. Test permits expire after 60 seconds.
• Use synthetic data only. No real payments, human records, secrets or production system actions.

Owner flow

Sign in at /testnet, create a space with exact allowed action/resource/country/currency and maximum per action. Save the enrollment key shown once. Revocation and cascading test-space deletion are available in the same screen. Signed-in owners can also use /api/v1/testnet/spaces GET/POST and /{id} GET/DELETE, or /{id}/revoke POST with {agent}.

Agent flow (Node 22+)

Download /sdk/testnet.mjs, then:

import { FTAITestnet } from './testnet.mjs';
import { randomUUID, createHash } from 'node:crypto';
const client = new FTAITestnet(process.env.FTAI_BASE_URL, process.env.FTAI_TESTNET_KEY);
await client.enroll('Synthetic integration agent');
const body = {
  taskId: randomUUID(),
  request: { action:'document.read', resource:'test-document:1', country:'FI', currency:'EUR', amountMinor:0 },
  inputHash: createHash('sha256').update('{}').digest('hex')
};
const permit = await client.request('authorize', body);
if (permit.decision !== 'ALLOW') throw Error('Test authority denied');
await client.request('consume', body);
// A second consumption must fail. Nothing here executes an external tool.

This client creates an ephemeral key pair in memory. Each new instance enrolls a new disposable test identity; persistent production identities use the runtime SDK instead.

Wire format

POST /api/v1/testnet/enroll, bearer test-space enrollment key, body {name, publicKey:{kty:"OKP",crv:"Ed25519",x:<base64url>}}. Sign newline-separated FTAI-Testnet-Enrollment-v1, exact origin, SHA-256 of exact UTF-8 body. Pass base64url signature in X-FTAI-Signature.

POST /api/v1/testnet/authorize or /consume with {taskId,request,inputHash} and runtime headers X-FTAI-Agent, X-FTAI-Timestamp, X-FTAI-Nonce, X-FTAI-Signature. Sign newline-separated FTAI-Testnet-Request-v1, origin, agent code, method, pathname+query, Unix seconds, random UUID nonce, SHA-256 body. Proofs must be within 60 seconds and cannot replay. ALLOW may issue or consume a test permit; DENY and ESCALATE never do. Revoked identities cannot obtain or consume permits.