Every device. Every LLM. One protocol.

01 · POST /eap/v1/device/register

Device Registration

A device announces itself — its class, OS, sensors, actuators, user-granted scopes, and operational state.

{
  "deviceId": "iphone-15-pro-abc",
  "deviceClass": "ios_phone",
  "manifest": {
    "sensors": ["hrv_proxy", "motion", "location_geofence"],
    "actuators": ["push_notification", "haptic", "voice_tts"],
    "userGrantedScopes": ["edge:phone:notification"]
  }
}

02 · GET /eap/v1/devices/:userId

Capability Discovery

An LLM reads the user’s full device fleet — what’s online, what’s addressable, and what scopes are already granted.

→ {
  "fleet": [
    { "deviceId": "iphone-15-pro-abc", "online": true, ... },
    { "deviceId": "watch-series-9-def", "online": true, ... },
    { "deviceId": "macbook-pro-ghi", "online": false, ... }
  ],
  "aggregatePreferences": { "panicSwitch": false }
}

03 · POST /eap/v1/action/request

Action Request

The LLM proposes a single action on a single device. The coordinator decides locally, returns allowed or denied with reasoning.

{
  "deviceId": "watch-series-9-def",
  "actuator": "haptic",
  "params": { "pattern": "double-tap" },
  "scopeRequested": "edge:watch:haptic",
  "confidence": 0.83
}

04 · POST /eap/v1/orchestration

Cross-Device Orchestration

A multi-device flow with atomicity guarantees. all_or_none or best_effort. Each step is evaluated independently and as a composite.

{
  "atomicity": "all_or_none",
  "steps": [
    { "deviceId": "watch-...", "actuator": "haptic" },
    { "deviceId": "iphone-...", "actuator": "voice_tts" },
    { "deviceId": "macbook-...", "actuator": "dim_screen" }
  ]
}

05 · POST /eap/v1/sensor/subscribe

Sensor Subscription

The LLM subscribes to a sensor stream with a filter. The device-side daemon fires the webhook when the filter matches.

{
  "deviceId": "watch-series-9-def",
  "sensor": "hrv_proxy",
  "filter": { "deltaPctMin": 15, "directionDown": true },
  "webhookUrl": "...",
  "rateLimitPerHour": 6
}

06 · GET /eap/v1/sensor/:deviceId/:sensor

Sensor Snapshot

Point-in-time read of a sensor value. The complement to subscriptions when the LLM needs a value right now.

GET /eap/v1/sensor/watch-series-9-def/location_geofence

→ { "kind": "home", "subRegion": "kitchen", "asOf": "..." }

07 · POST /eap/v1/action/outcome

Action Outcome

Fired by EAP, not the LLM. Reports execution status, user interaction, latency, and the user tag if the user responded.

{
  "executionToken": "et_xyz",
  "outcome": "executed",
  "deviceState": { "userInteracted": true, "interactionLatencyMs": 1200 },
  "userTag": "caught_me"
}

08 · POST /eap/v1/scope/grant

Authorization & Scope Grant

User-initiated. The user opens the EAP consent UI and explicitly grants a scope to an LLM. Time-bound, revocable, logged.

{
  "llmId": "anthropic-claude-sonnet-3.7",
  "scope": "edge:watch:haptic",
  "expiresAt": null,
  "revocable": true
}

09 · GET /eap/v1/audit

Audit Log

Every request, outcome, grant, and revoke is logged. User can review at any time, export as JSON, revoke retroactively.

10 · POST /eap/v1/panic

Panic Switch

One-tap, user-initiated. Immediately revokes every LLM scope across every device for 24 hours. The airplane-mode of proactive AI.

POST /eap/v1/panic

→ {
  "panicSwitch": true,
  "expiresAt": "2026-05-22T21:43:18Z",
  "scopesRevoked": 47
}