For Agents
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the FinSpace User Environment Management service, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
What an agent can do with FinSpace User Environment Management service API.
Create FinSpace environments with KMS encryption and federation configuration
Retrieve environment status, ID, and ARN for downstream automation
Update environment names, descriptions, and federation parameters
Delete FinSpace environments when projects wind down
GET STARTED
Create, configure, and tear down FinSpace environments for financial data analytics through a single management API.
Use for: I need to provision a new FinSpace environment for our quant team, List all FinSpace environments in this account, Update the description of an existing environment, Delete a FinSpace environment that is no longer used
Not supported: Does not handle dataset, changeset, or dataview operations and does not run analytics queries — use for FinSpace environment lifecycle and tagging only.
Jentic publishes the only available OpenAPI document for FinSpace User Environment Management service, keeping it validated and agent-ready.
Jentic publishes the only available OpenAPI specification for FinSpace User Environment Management service, keeping it validated and agent-ready. FinSpace is AWS's data management and analytics service for the financial services industry, and this management API handles environment lifecycle. The API creates, retrieves, updates, and deletes FinSpace environments and manages tags applied to those environments. It is built for capital markets and financial-data platform teams that need to provision FinSpace environments programmatically as part of a wider data infrastructure pipeline.
List all FinSpace environments accessible from the calling account
Apply and remove resource tags for cost allocation and ownership tracking
List tags attached to a specific FinSpace environment ARN
Patterns agents use FinSpace User Environment Management service API for, with concrete tasks.
★ Quant Team Environment Provisioning
Capital markets platform teams use the FinSpace management API to provision dedicated FinSpace environments for quant and research desks. The API drives environment creation with encryption keys and identity federation so each desk receives an isolated analytics workspace tied to a specific KMS key. Environment provisioning typically takes ten to thirty minutes and returns an environment ID for downstream tooling.
Create a FinSpace environment named quant-research with KMS key alias/finspace-quant and federation mode FEDERATED.
Environment Tag Governance
Platform governance teams use the tag operations on this API to enforce cost allocation and ownership labels across all FinSpace environments. The API supports adding, removing, and listing tags so audit pipelines can assert that every environment carries the required cost-center, owner, and data-classification labels. Untagged environments can be quarantined automatically.
Apply tags cost-center=trading and owner=quant-team to FinSpace environment with ARN arn:aws:finspace:...:environment/abcd.
Environment Decommissioning
Platform teams use the management API to decommission FinSpace environments when projects end, returning the associated KMS keys and freeing the environment quota. The API exposes status fields so decommission scripts can verify deletion has fully completed before proceeding to dependent cleanup. Environment deletion is asynchronous and may take several minutes to settle.
Delete FinSpace environment with environmentId env-123 and poll the GetEnvironment status until it is removed.
Agent-Driven FinSpace Environment Operations via Jentic
AI agents use the FinSpace management API through Jentic to handle environment lifecycle requests submitted via internal workflows or chat interfaces. Jentic exposes the eight environment and tag operations as discoverable tools so an agent can search by intent and execute the matching call. This shortens lead time for new analytics workspaces from days to minutes.
Search Jentic for create finspace environment, load the CreateEnvironment schema, and execute it for environment macro-research with KMS key alias/finspace-default.
8 endpoints — jentic publishes the only available openapi specification for finspace user environment management service, keeping it validated and agent-ready.
METHOD
PATH
DESCRIPTION
/environment
Create a FinSpace environment
/environment
List FinSpace environments
/environment/{environmentId}
Get details of a specific environment
/environment/{environmentId}
Update environment configuration
/environment/{environmentId}
Delete a FinSpace environment
/tags/{resourceArn}
Apply tags to a FinSpace resource
/tags/{resourceArn}
List tags for a FinSpace resource
/environment
Create a FinSpace environment
/environment
List FinSpace environments
/environment/{environmentId}
Get details of a specific environment
/environment/{environmentId}
Update environment configuration
/environment/{environmentId}
Delete a FinSpace environment
Three things that make agents converge on Jentic-routed access.
Credential isolation
AWS access keys for FinSpace are stored encrypted in the Jentic vault. Agents receive scoped, short-lived signing access — raw secret access keys never enter the agent context.
Intent-based discovery
Agents search by intent (for example provision a finspace environment) and Jentic returns matching FinSpace operations with their input schemas, so the agent can call the right endpoint without browsing AWS docs.
Time to first call
Direct FinSpace integration: 1 day for SigV4 signing and environment polling. Through Jentic: under 30 minutes — search, load schema, execute.
Alternatives and complements available in the Jentic catalogue.
FinSpace Public Data API
Manages datasets, changesets, and dataviews inside FinSpace environments
Choose finspace-data when the task is to load, organise, or query data inside a FinSpace environment rather than provision the environment itself.
Amazon SageMaker
General-purpose machine learning platform on AWS
Choose SageMaker when the analytics workload is general ML rather than financial services-specific data management.
AWS Lambda
Runs custom logic in response to FinSpace lifecycle events
Choose Lambda when you need to react to environment state changes with custom automation.
Specific to using FinSpace User Environment Management service API through Jentic.
Why is there no official OpenAPI spec for FinSpace User Environment Management service?
AWS does not publish an OpenAPI specification. Jentic generates and maintains this spec so that AI agents and developers can call FinSpace User Environment Management service via structured tooling. It is validated against the live API and kept up to date. Get started at https://app.jentic.com/sign-up.
What authentication does the FinSpace management API use?
FinSpace uses AWS Signature Version 4 request signing. Through Jentic, AWS access keys are stored encrypted in the vault and signing happens server-side, so the agent never sees the raw secret access key.
Can I provision a FinSpace environment with this API?
Yes. POST /environment creates a FinSpace environment with name, KMS key, and federation parameters. The response returns an environmentId; use GET /environment/{environmentId} to poll until the status becomes CREATED.
What are the rate limits for the FinSpace management API?
AWS applies per-account, per-region throttling. Environment lifecycle calls are mutating and have lower allowed rates than describes. Use exponential backoff on ThrottlingException responses; AWS does not publish exact TPS numbers in the spec.
How do I tag a FinSpace environment through Jentic?
Search Jentic for tag finspace resource, load the schema for POST /tags/{resourceArn}, and execute it with the environment ARN and a tags map. Jentic returns the updated tag state.
Does this API include FinSpace data operations like dataset queries?
No. This API only manages environments and tags. Dataset, changeset, and dataview operations live in the FinSpace Public Data API (finspace-data), a separate service.
/tags/{resourceArn}
Apply tags to a FinSpace resource
/tags/{resourceArn}
List tags for a FinSpace resource