DataTrails provides an evidence management platform that delivers a reliable chain of custody for supply chain data, ensuring data authenticity and transparency.
DataTrails provides an evidence management platform that delivers a reliable chain of custody for supply chain data, ensuring data authenticity and transparency. On Nagent, Rkvst is exposed as a fully-configurable security & identity tools integration that any agent can call — 24 actions, and API key authentication. No code is required to wire Rkvst into your workflow — connect it once via the External Integrations panel and reuse it across every agent you build.
Agent builders use Rkvst to automate the kinds of tasks security & identity tools teams previously handled manually. Concrete examples — each one is a single agent step in Nagent — include:
Every action and trigger is paired with a structured input/output schema (visible in the sections below), so when you wire Rkvst into Helix — our agentic agent builder — the editor knows exactly what each step expects and produces. Configure once, deploy anywhere across your Nagent agents.
Every operation an agent can call against Rkvst, with input parameters and output schema. Drop these into any step of an agent built in Helix.
RKVST_DOWNLOAD_EVENT_ATTACHMENTTool to download an attachment from a specified Event on an Asset. Use when you have asset_uuid, event_uuid, and attachment uuid, and want the raw binary content.
Input parameters
UUID of the attachment (omit the 'blobs/' prefix).
UUID of the asset containing the event.
UUID of the event to which the attachment belongs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_APP_REGISTRATIONTool to retrieve details for a given App Registration ID. Use after obtaining the application's UUID to inspect its configuration and credentials.
Input parameters
UUID of the App Registration to retrieve.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_ASSETTool to retrieve details for a given Asset. Use after you have its UUID; set `at_time` to get historical state.
Input parameters
Optional ISO 8601 timestamp to retrieve the Asset's state at a past time
UUID of the Asset to retrieve
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_BLOBTool to retrieve details of a Blob by ID. Use after confirming the Blob ID.
Input parameters
UUID of the Blob to retrieve (accepts 'blobs/{uuid}' as well).
Optional public asset UUID to use when retrieving public attachment metadata without Authorization. If provided, the tool will call the public attachments info endpoint to retrieve the blob metadata.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_EVENTTool to retrieve details of a specified Event. Use when you need full metadata, attributes, and associated trails of an existing event in DataTrails.
Input parameters
UUID of the event to retrieve.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_IAM_SUBJECTTool to retrieve IAM subject details. Use when you need to fetch details for a specific IAM subject by its ID.
Input parameters
Unique identifier (UUID) of the IAM subject to retrieve.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_MEMBERTool to retrieve details for a given Member ID. Use after obtaining a valid member UUID.
Input parameters
UUID of the Member to retrieve.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_PUBLIC_ASSETTool to retrieve details for a public asset. Use when you have a public asset UUID.
Input parameters
UUID of the public asset to retrieve
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_PUBLIC_ASSET_EVENTTool to retrieve a specific public asset event. Use when you have public asset and event UUIDs.
Input parameters
UUID of the event to retrieve
UUID of the public asset
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_GET_TENANCYTool to retrieve details for a specific tenancy. Use after you have a tenancy ID.
Input parameters
Unique identifier of the tenancy. Accepts either raw UUID or the full identity string in the format 'tenant/{UUID}'. Leading/trailing whitespace is ignored.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_LIST_APP_REGISTRATIONSTool to list all App Registrations. Use after acquiring a valid auth token to retrieve the applications registered under the tenant.
Input parameters
Pagination token from a previous call; omit for the first page.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_LIST_ASSET_EVENTSTool to list events for a specified asset. Use after confirming you have the asset UUID.
Input parameters
Order results for certain schemas (e.g., SIMPLEHASHV1)
Maximum number of results per page, must be >= 1
UUID of the Asset to list events for
Token for retrieving the next page of results, obtained from next_page_token in a previous response
Return events with confirmation status at or above this level (e.g., COMMITTED, CONFIRMED)
Filter by asset attribute equality; key->value. Use '*' for presence or '!=*' for absence.
Filter by event attribute equality; key->value. Use '*' for presence or '!=*' for absence.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_LIST_ASSETSTool to list all Assets with optional pagination and filters. Use when you need to retrieve asset metadata in batches via page_size and next_page_token.
Input parameters
Maximum number of assets to return.
Token to retrieve the next page of assets.
Filter by proof mechanism (e.g., 'MERKLE_LOG').
If true, includes 'x-total-count' header in the response.
Filter by asset display name. Use '=' for exact match, '*' for presence, '!=*' for missing.
Filter by asset type (e.g., 'Traffic light').
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_LIST_IAM_SUBJECTSTool to list IAM subjects. Use when you need to retrieve provider-managed subjects, optionally filtering by display name. Use after authenticating the tenant.
Input parameters
Specify sort order for results.
Maximum entries per page.
Token to retrieve the next page of results.
Filter subjects by friendly display name.
Filter subjects by wallet address.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_LIST_MEMBERSTool to list all tenant Members. Use when you need an overview of all users in your tenant.
Input parameters
Filter by member state. Use MEMBER_STATE_ACTIVE to include only active members, MEMBER_STATE_INACTIVE for only inactive members, or MEMBER_STATE_BOTH to include both.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_LIST_PUBLIC_ASSET_EVENTSTool to list events for a specific public asset. Use when you need to retrieve the event history of a public asset after confirming its public availability.
Input parameters
UUID of the public Asset to list events for
Pagination token from a previous call; omit for the first page.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_LIST_PUBLIC_ASSETSTool to list all Public Assets. Use when you need to retrieve all assets made public.
Input parameters
Optional page size to limit number of public events fetched (used as proxy for assets).
Pagination token from a previous call to public events; omit for the first page.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_LIST_TENANCIESTool to list all tenancies. Use after authenticating to retrieve the tenancy records available to the current tenant.
Input parameters
Pagination token from a previous call; omit for the first page.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_PROMOTE_MEMBERTool to promote a tenant member to OWNER role. Use when you need to elevate permissions after verifying the member identity.
Input parameters
UUID of the Member to promote.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_RETRIEVE_ASSET_ATTACHMENT_METADATATool to retrieve metadata for an attachment on a specified Asset. Use after obtaining asset and attachment UUIDs.
Input parameters
UUID of the attachment (no 'blobs/' prefix)
UUID of the asset owning the attachment
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_RETRIEVE_CAPSTool to retrieve resource limit quotas for a specified service. Use when checking quota availability before provisioning resources.
Input parameters
Resource type to return caps for. Allowed values: access_policies, applications, assets, blobs, locations, members.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_RETRIEVE_EVENT_ATTACHMENT_METADATATool to retrieve metadata for an attachment on a specified Event. Use when you have asset_uuid, event_uuid, and attachment uuid and need details like size, hash, and scan status.
Input parameters
UUID of the attachment (omit the 'blobs/' prefix).
UUID of the asset containing the event.
UUID of the event to which the attachment belongs.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_SEARCH_EVENTSTool to search events matching filter criteria with pagination. Use when retrieving events by OData filter and paging through large result sets.
Input parameters
Max number of results to return (1-50).
Number of results to skip before returning the page.
OData filter expression. Filterable fields: trails, event_type, origin_tenant, created_by, created_at, ledger_entry/index, ledger_entry/idtimestamp, ledger_entry/content_hash. Example: "trails/any(t: t eq 'Clouseau') and event_type eq 'CREATED'"
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
RKVST_UPDATE_APP_REGISTRATIONTool to update an application's display name or custom claims. Use after retrieving an App Registration to apply partial updates to its configuration.
Input parameters
New human-readable display name for the Application.
Custom claims to set on the Application for use in access policies.
UUID of the App Registration to update.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
No publicly available marketplace agent is found using this tool yet. There are 40 agents privately built on Nagent that already use Rkvst.
Build on Nagent
Connect Rkvst to any Nagent agent in minutes — no API key management, no boilerplate. Just configure and deploy.
The five questions agent builders ask before adopting a new integration.
Open the External Integrations panel inside Nagent (app.nagent.ai/externalIntegration), find Rkvst, and click "Connect Now." You'll authenticate with an API key — Nagent handles credential storage and refresh automatically. Once connected, Rkvst is available to any agent in your workspace.
No. Nagent provides no-code integration for every tool. Once Rkvst is connected, you configure its 24 actions directly in the agent builder UI — no API calls, no boilerplate, no schema management.
Helix — Nagent's agentic agent builder — lets you drop Rkvst steps into any workflow visually. Pick an action (e.g., one of those listed above), fill in the inputs (Helix knows the required vs. optional schema for each parameter), and connect it to upstream/downstream steps. Triggers run as the entry point of an agent, so when a Rkvst event fires, the agent kicks off automatically.
Every Rkvst action and trigger ships with a fully-typed schema — input parameters with name, type, required flag, and description, plus the output payload shape. The schemas are documented in the sections above. Helix uses these schemas to validate your configuration at build time and to type-check the data flowing between steps.
Yes. While Rkvst ships with 24 pre-built security & identity tools actions, you can layer custom logic around them inside Helix — pre/post-processing steps, conditional branches, retries, or stitching Rkvst together with other connected tools. For deeper customization, talk to our team about Nagent's Agentic AI Lab — forward-deployed engineers who build Rkvst-based workflows tailored to your business.