Records Assistant

Entity identifier

https://rp.directory.showcase.raidiam.io/openid_relying_party/70219aeb-bcde-4df8-89e8-a1cc072e32ed

Software statement

70219aeb-bcde-4df8-89e8-a1cc072e32ed

Organisation

TARNBROOK-GROUP

Where it runs

Connect hosted

Lifecycle

Active

Deployed

2026-09-17T21:28:57.360Z, run run-fagd5hcj

The entity identifier is the address this agent publishes its own signed record at. The software statement is the record Raidiam Connect holds for it, and every key and every role below hangs off that record.

This agent publishes one signed document that describes itself. It is called an entity configuration. A stranger reads it to learn the agent's keys and what it says it is.

Read this agent’s signed record

Download the signed file. It is a JWT, so a browser saves it and shows nothing.

A key id names one public key the directory publishes for this agent. A reader who checks a signature looks the key up by this value. This catalogue holds the private key for Tarnbrook Financial Group and never sends it anywhere. The agent signs with a second key, g2X4GSxhAspWVT5on0xJxxmUgSbSWAZPNQeFzE5_aNA, when it proves who it is to a token endpoint.

Tarnbrook asked for the roles on the left. The authority signed a statement about this agent and set the limits on the right. A platform reads those limits before it lets the agent do anything.

{
  "authorization_details_types": {
    "value": [
      "records.read",
      "records.annotate",
      "transfer.initiate",
      "transfer.status"
    ]
  },
  "backchannel_token_delivery_mode": {
    "value": "poll"
  },
  "client_name": {
    "value": "Records Assistant"
  },
  "client_registration_types": {
    "value": [
      "automatic"
    ]
  },
  "grant_types": {
    "value": [
      "client_credentials",
      "authorization_code",
      "urn:ietf:params:oauth:grant-type:device_code",
      "urn:openid:params:grant-type:ciba"
    ]
  },
  "jwks_uri": {
    "value": "https://keystore.directory.showcase.raidiam.io/TARNBROOK-GROUP/70219aeb-bcde-4df8-89e8-a1cc072e32ed/application.jwks"
  },
  "logo_uri": {
    "value": "https://data.directory.showcase.raidiam.io/logos/TARNBROOK-GROUP/softwarestatements/70219aeb-bcde-4df8-89e8-a1cc072e32ed.png"
  },
  "redirect_uris": {
    "value": [
      "https://agents.showcase.raidiam.io/records-assistant/cb"
    ]
  },
  "sector_identifier_uri": {
    "value": "https://keystore.directory.showcase.raidiam.io/TARNBROOK-GROUP/70219aeb-bcde-4df8-89e8-a1cc072e32ed/redirect_uris.json"
  },
  "software_version": {
    "value": "1"
  },
  "token_endpoint_auth_method": {
    "value": "private_key_jwt"
  }
}

This agent runs without an attested copy, because the operator holds its key.

Open the runtime screen

A chain is the path from this agent up to the anchor this estate trusts. Ask the Tarnbrook Financial Group authority to walk that path and read what it answers.

See the resolved evidence Ask the authority to resolve this agent Run the independent checks

Raidiam Connect hosts this identity. Withdrawing a hosted identity is permanent: Connect deletes the record, the identifier is never used again, and no restore exists. This screen therefore offers no withdrawal for it. A self hosted identity in this estate withdraws and restores cleanly, so use one of those to see the workflow.