Install Jentic One Beta
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the cubic API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.
Step 1: Jentic One Host machine
# On the machine that will host your Jentic One instance:
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Fcubic.dev%2Fcubic" | shStep 2: Agent machine
# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Fcubic.dev%2Fcubic" | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
What an agent can do with cubic API.
List the organizations your key can view
List the members of an organization
Read a single member by their GitHub user id
Turn a member's seat on or off
Change a member's role within the organization
GET STARTED
Patterns agents use cubic API for, with concrete tasks.
★ Agent-driven seat management
An AI agent handling access requests can list an organization's members and turn a member's seat on or off without a human opening the settings page. Because the cubic API addresses each member by their GitHub user id, the agent targets exactly the right person when it updates a seat.
List the members of an organization, then turn off the seat for the member with a given GitHub user id
Membership and role audit
Reviewing who has access to an organization means reading the current member list and each member's role. The cubic API lists members and reads a single member, so an audit can enumerate the organization and flag anyone whose role is higher than expected. A read-only organization key can run this audit without the ability to change anything.
List the members of an organization and read each member's role to produce an access review
Role changes on offboarding
When someone leaves a team, their seat and role need updating promptly. The cubic API updates a member to turn off their seat or change their role, so an offboarding workflow can revoke a seat as soon as the trigger fires. The update operation is the only write in the API, which keeps the blast radius small.
Turn off the seat for a departing member identified by their GitHub user id in a given organization
4 endpoints — the cubic api manages the organizations and members tied to a cubic account.
METHOD
PATH
DESCRIPTION
/api/v1/organizations
List the organizations the key can view
/api/v1/organizations/{org}/members
List the members of an organization
/api/v1/organizations/{org}/members/{githubUserId}
Read a single member
/api/v1/organizations/{org}/members/{githubUserId}
Turn a seat on or off, or change a role
/api/v1/organizations
List the organizations the key can view
/api/v1/organizations/{org}/members
List the members of an organization
/api/v1/organizations/{org}/members/{githubUserId}
Read a single member
/api/v1/organizations/{org}/members/{githubUserId}
Turn a seat on or off, or change a role
What agents get from Jentic-routed access to this vendor.
Setup
Wiring the cubic API by hand means handling its bearer-token auth, the difference between personal (cbk_) and organization (cok_) keys, and the read-only limits on an org key yourself. Through Jentic you install once, import cubic from the API Directory, store the key once, and your agent calls it.
Permission scoping
cubic puts the organization id in the URL path (/api/v1/organizations/{org}/...), so a rule can pin your agent to one organization and the member operations you pick. You choose the operations it may call, so the member update that toggles a seat or changes a role is not included unless you add it.
Credential isolation
Your cubic key is stored once, encrypted, by your own Jentic One instance and injected at execution time. It never enters the agent's prompt, logs, or context.
Intent-based discovery
Agents search Jentic by intent such as 'list organization members' or 'change a member's role', and Jentic returns the matching cubic operation with its input schema so the agent calls the right endpoint without reading the reference docs.
Alternatives and complements available in the Jentic catalogue.
Specific to using cubic API through Jentic.
What authentication does the cubic API use?
The cubic API authenticates with a bearer token: a personal API key prefixed cbk_ or an organization key prefixed cok_, as declared in its OpenAPI spec. An organization key with read access can call only the GET operations. Through Jentic the key is stored once and injected at call time, so it never appears in your agent's prompt or logs.
Can a read-only key still change member seats with the cubic API?
No. An organization key with read access can call only the GET operations, so it can list organizations and members and read a single member, but it cannot turn a seat on or off or change a role. A personal key is needed for the update operation.
What are the rate limits for the cubic API?
The OpenAPI spec does not state numeric rate limits for the cubic API. Check the vendor documentation at https://www.cubic.dev for current limits before running frequent member audits.
How do I manage members through Jentic with the cubic API?
Search Jentic for 'list organization members', which returns the GET /api/v1/organizations/{org}/members operation with its input schema, then call it for a given organization. To run it on your own infrastructure, install Jentic One from its GitHub repo.
Can I limit what my agent is allowed to do with the cubic API?
Yes. Because cubic puts the organization id in the URL path, write a rule that allows only the member read operations under one organization, so the agent can list members and read roles but cannot toggle a seat or change a role, and every call it makes is logged.
For Agents
List the organizations a key can view, read and list organization members, and update a member by toggling their seat or changing their role.
Use for: List the organizations I can access, List the members of an organization, Get a member's role and seat status, Turn a member's seat off
Not supported: Does not handle code review, repositories, or billing. Use for organization member and seat management only.
The cubic API manages the organizations and members tied to a cubic account. It lists the organizations a key can view, lists and reads the members of an organization, and updates a member by turning their seat on or off or changing their role. A personal key sees everything the key owner can, while a read-only organization key is limited to the read operations.
This API is usable in Jentic One now. Its AI-readiness score against Jentic's framework shows where it stands today and where improvements would make it even easier for agents to use.
Base layer of spec validity and structural soundness.
Aggregated quality score from linter diagnostics, weighted by severity.
Percentage of `$ref` references that resolve successfully.
Checks whether the API description parses successfully and conforms to its declared specification (e.g., OpenAPI).
Structural correctness score based on schema issues using logarithmic dampening.
Clarity, completeness, and ingestion readiness for developers and tooling.
How richly the API is illustrated with examples.
Percentage of examples that conform to their schemas.
Percentage of operations with complete response definitions (success, client error, server error).
Health of API ingestion, bundling, and resolution within Jentic pipelines.
Semantic breadth, depth, and agent comprehension for AI systems.
Coverage of descriptions across API elements.
Coverage of RFC 9457 Problem Details for error responses.
Coverage, uniqueness, and casing consistency of operationIds for AI inference.
Coverage of summaries across operations/tags/info.
Functional utility, complexity comfort, and AI orchestration readiness.
Agent comfort level based on API operational and structural complexity.
Trust, risk posture, and security compliance.
Average quality of security schemes based on authentication method strength (weakest link for OAuth2).
Findability, semantic richness, and reasoning readiness.
Clarity and depth of descriptions across API elements.
Score it yourself
Every API in the directory is allowlisted, so you can re-score it with no key required.
npx @jentic/api-scorecard-cli score <openapi-url>