# Cloud Agent Admin API

The cloud agent admin API allows you to easily perform decentralized identity (DI) operations using your dedicated cloud agent instance. This API is pure GraphQL and can be interacted with by any HTTP client, empowering both server-side and client-side web applications with decentralized identity capabilities.

The cloud agent supports Aries protocols and the Anoncreds and W3C Verifiable Credential Data Model specifications, with support for more protocols and digital credential specifications coming soon.

## Key Features

|                                                                                                                                                                                                                                                                                                                                                                       |                                                                                                                                                                                                                                                                                                                                                                                    |
| --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| [Establish end-to-end encrypted DIDComm connections](https://docs.sudoplatform.com/guides/decentralized-identity/cloud-agent/cloud-agent-admin-api/aries-interop-profile-aip/connection-exchanges)                                                                                                                                                                    | Send connection invitations, and reply to connection invitations                                                                                                                                                                                                                                                                                                                   |
| [Manage established connections](https://docs.sudoplatform.com/guides/decentralized-identity/cloud-agent/cloud-agent-admin-api/connections)                                                                                                                                                                                                                           | Browse connections and close connections                                                                                                                                                                                                                                                                                                                                           |
| [Securely message connections](https://docs.sudoplatform.com/guides/decentralized-identity/cloud-agent/cloud-agent-admin-api/basic-messages)                                                                                                                                                                                                                          | Securely send and receive textual messages with established connections                                                                                                                                                                                                                                                                                                            |
| Write Anoncreds [schemas](https://docs.sudoplatform.com/guides/decentralized-identity/cloud-agent/cloud-agent-admin-api/credentials/anoncreds-credentials/schemas) and [credential definitions](https://docs.sudoplatform.com/guides/decentralized-identity/cloud-agent/cloud-agent-admin-api/credentials/anoncreds-credentials/credential-definitions) to the ledger | Prepare your own Anoncreds credential templates and apply them when issuing Anoncreds credentials                                                                                                                                                                                                                                                                                  |
| [Issue and receive credentials](https://docs.sudoplatform.com/guides/decentralized-identity/cloud-agent/cloud-agent-admin-api/aries-interop-profile-aip/credential-exchanges)                                                                                                                                                                                         | Issue both Anoncreds and W3C credentials with a single unified API, supporting all Aries protocol versions for maximum interoperability. The cloud agent can also hold its own credentials when necessary. Your organization has full control over whether to keep or erase the cloud agent's credential exchange history                                                          |
| [Verify and present credentials](https://docs.sudoplatform.com/guides/decentralized-identity/cloud-agent/cloud-agent-admin-api/aries-interop-profile-aip/proof-exchanges)                                                                                                                                                                                             | Verify both Anoncreds and W3C credentials with a single unified API, supporting all Aries protocol versions for maximum interoperability. The cloud agent can also present its own credentials when necessary. Your organization has full control over whether to keep or erase the cloud agent's verification history                                                             |
| [Manage held credentials](https://docs.sudoplatform.com/guides/decentralized-identity/cloud-agent/cloud-agent-admin-api/credentials)                                                                                                                                                                                                                                  | Manage both [Anoncreds credentials](https://docs.sudoplatform.com/guides/decentralized-identity/cloud-agent/cloud-agent-admin-api/credentials/anoncreds-credentials) and [W3C credentials](https://docs.sudoplatform.com/guides/decentralized-identity/cloud-agent/cloud-agent-admin-api/credentials/w3c-credentials) which are held by the cloud agent under a single unified API |
| [Audit trail for the cloud agent](https://docs.sudoplatform.com/guides/decentralized-identity/cloud-agent/cloud-agent-admin-api/audit-logs)                                                                                                                                                                                                                           | The cloud agent admin API automatically logs all user operations, giving you internal visibility on your organizational operations                                                                                                                                                                                                                                                 |

## Next steps

* [Integrate your server-side or client-side application with the cloud agent admin API](https://docs.sudoplatform.com/guides/decentralized-identity/cloud-agent/cloud-agent-admin-api/integrate-the-cloud-agent-admin-api)