Quickstart

This guide will help you set up your Tenuo Cloud account and issue your first warrant.

Prerequisites

• A Tenuo Cloud account (sign up (opens in a new tab))
• An API key with admin scope

Step 1: Log into the Dashboard

Navigate to app.tenuo.cloud (opens in a new tab) and enter your API key to access the admin dashboard.

Step 2: Create Your Key Hierarchy

Tenuo uses a hierarchical key structure:

1. Root Key - The top-level key that signs issuer keys
2. Issuer Keys - Sign warrants for agents
3. Notary Keys (optional) - Sign receipts for audit

Step 3: Issue a Warrant

With your keys set up, you can now issue warrants to your AI agents using the Python SDK (opens in a new tab) or CLI (opens in a new tab).

from tenuo import Tenuo
 
# Initialize with your issuer key
tenuo = Tenuo(issuer_key="your-issuer-key")
 
# Issue a warrant to an agent
warrant = tenuo.issue(
    holder="agent-123",
    actions=["read:documents", "write:summaries"],
    expires_in="1h"
)

Step 4: Set Up Revocations

If you need to revoke a warrant before it expires:

1. Go to Revocations in the dashboard
2. Click Create Revocation
3. Enter the warrant ID to revoke
4. Click Regenerate SRL to publish the updated revocation list

Your authorizers will automatically fetch the new Signed Revocation List (SRL).

Next Steps