agent: ACL endpoint