In Agent Registry, publishers let you verify the authority behind registered
standalone skills to help prevent unauthorized use of publisher names. Each
publisher establishes the
verified domain or ID prefix for
skill identifiers,
such as cloud.google.com for Google-managed skills or private- for manually
registered skills.
Google controls publisher creation, updates, and deletions. Skills that you
create are automatically assigned to the default private publisher, which uses
the private- prefix. You can list and inspect publisher details in
Agent Registry to verify the ownership of registered skills.
Before you begin
- Set up Agent Registry.
Get the project ID for the governance project where Agent Registry is enabled.
To use the Google Cloud CLI commands in this document, set up your gcloud CLI environment.
Required roles
To get the permissions that
you need to review skill publisher details in Agent Registry,
ask your administrator to grant you the
Agent Registry API Viewer (roles/agentregistry.viewer) IAM role on the governance project
where Agent Registry is enabled.
For more information about granting roles, see Manage access to projects, folders, and organizations.
You might also be able to get the required permissions through custom roles or other predefined roles.
Other Agent Registry roles might also include the permissions required to view skill publisher details. For more information, see Agent Registry roles and permissions.
Publisher tiers
Publishers are categorized into tiers that reflect their level of verification:
- Google-managed (
FIRST_PARTY): verified publishers that Google manages, such ascloud.google.comanddiscoveryengine.googleapis.com. - Private (
PRIVATE): the defaultprivatepublisher automatically assigned to the skills you or other users create within the project.
List publishers
You can list all publishers configured in your location:
Console
- In the Google Cloud console, go to the Agent Registry page:
- Select the Skills tab. The page displays a list of all your registered skills.
- In the Publisher column of all registered skills, you can browse all available verified publishers that you associated with each of your skills.
gcloud
To list all verified publishers in a location, run the
gcloud alpha agent-registry publishers list
command:
gcloud alpha agent-registry publishers list \
--project=PROJECT_ID \
--location=LOCATION
Replace the following:
PROJECT_ID: the project ID.LOCATION: the registry location.
REST
curl -X GET \
-H "Authorization: Bearer $(gcloud auth print-access-token)" \
"https://agentregistry.googleapis.com/v1alpha/projects/PROJECT_ID/locations/LOCATION/publishers"
Replace the following:
PROJECT_ID: the project ID.LOCATION: the registry location.
View publisher details
You can inspect details for a specific publisher:
Console
- In the Google Cloud console, go to the Agent Registry page:
- Select the Skills tab.
- Click the name of a skill to open its details page.
In the Skill details section, locate the skill identifier of the skill.
Use this skill identifier field to find a specific publisher's assets. For example, the format for Google-managed skills is
urn:skill:PUBLISHER_ID:NAMESPACE:SKILL_ID.
gcloud
To view details for a specific publisher, run the
gcloud alpha agent-registry publishers describe
command:
gcloud alpha agent-registry publishers describe PUBLISHER_ID \
--project=PROJECT_ID \
--location=LOCATION
Replace the following:
PUBLISHER_ID: the ID of the publisher you want to review.PROJECT_ID: the project ID.LOCATION: the registry location.
REST
curl -X GET \
-H "Authorization: Bearer $(gcloud auth print-access-token)" \
"https://agentregistry.googleapis.com/v1alpha/projects/PROJECT_ID/locations/LOCATION/publishers/PUBLISHER_ID"
Replace the following:
PROJECT_ID: the project ID.LOCATION: the registry location.PUBLISHER_ID: the ID of the publisher you want to review.
What's next
- Learn how to register standalone skills.