AGEI

API Documentation

RESTful API reference for AGEI integration

Important: Evidence Submission Responsibility

API evidence submissions are only as reliable as the systems and controls that generate them. AGEI helps preserve event evidence and policy decisions, but organizations remain responsible for ensuring that integrations submit accurate, complete, and authorized data.

Base URL

https://your-domain.com/api/v1

All API endpoints are prefixed with /api/v1

Authentication

Using Supabase Auth with API keys

Headers Required

Authorization: Bearer YOUR_API_KEY
Content-Type: application/json

Service Role Access

Use SUPABASE_SERVICE_ROLE_KEY for backend operations that bypass RLS.

Quick Navigation

Receipts & Evidence API Access Management Gates & Policies Human-in-the-Loop Agent Governance Audit Packs Organizations Privacy & GDPR Public Verification

Receipts & Evidence

Create Receipt

Record evidence without policy evaluation

POST

Endpoint

/api/v1/receipts

Request Body

{
  "organizationId": "uuid",
  "receiptType": "dataset_ingestion",
  "resourceType": "dataset",
  "resourceId": "customer-data-2026-q2",
  "receiptPayload": {
    "dataset_name": "Customer Feedback Q2",
    "record_count": 15420,
    "quality_score": 0.98
  },
  "upstreamReceiptIds": ["parent-receipt-uuid"],
  "linkType": "derives_from"
}

List Receipts

Query receipts with filters

GET

Endpoint

/api/v1/receipts?start_date=2026-01-01&limit=100

Verify Receipts

Verify cryptographic integrity

POST

Endpoint

/api/v1/receipts/verify

API Access Management

Create API Client

POST

Endpoint

/api/api-clients

Request Body

{
  "client_name": "ML Training Pipeline",
  "client_type": "pipeline",
  "environment": "production",
  "description": "Automated ML training system"
}

Create API Key

Generate authentication credential

POST

Endpoint

/api/api-keys

Request Body

{
  "api_client_id": "client-uuid",
  "key_name": "Production Key 1",
  "environment": "live",
  "expires_at": "2027-01-01T00:00:00Z"
}

⚠️ Important

Raw key returned only once - save immediately!

Grant Service Permissions

Authorize API key to access services

POST

Endpoint

/api/service-grants

Request Body (Bundle)

{
  "api_key_id": "key-uuid",
  "bundle_id": "evidence_submitter",
  "rate_limit_per_minute": 100,
  "monthly_quota": 1000000
}

Gates & Policies

Evaluate Policy Gate

Submit evidence for server-side policy evaluation

POST

Endpoint

/api/v1/gates/evaluate

Request Body

{
  "organizationId": "uuid",
  "gateDefinitionId": "uuid",
  "policyVersionId": "uuid",
  "resourceType": "ml_model",
  "resourceId": "fraud-detector-v2",
  "eventType": "training_completed",
  "eventPayload": {
    "accuracy": 0.94,
    "precision": 0.92,
    "test_samples": 5000
  }
}

Response (200 OK)

{
  "gateOutcome": "approve",
  "evaluationStatus": "pass",
  "decisionReasonCode": "ALL_POLICY_RULES_SATISFIED",
  "passedRules": ["accuracy_gte_0.85", "precision_gte_0.80"],
  "failedRules": [],
  "receiptId": "receipt-uuid",
  "gateEvaluationId": "eval-uuid"
}

Create Policy

Define governance rules

POST

Endpoint

/api/v1/policies

Create Gate

Set up governance checkpoint

POST

Endpoint

/api/v1/gates

Human-in-the-Loop (HITL)

Create HITL Request

Escalate decision to human reviewer

POST

Endpoint

/api/v1/hitl/request

Request Body

{
  "organizationId": "uuid",
  "requestType": "model_deployment",
  "resourceType": "ai_model",
  "resourceId": "model-123",
  "riskClassification": "high",
  "requiredReviewerRole": "model_risk_reviewer",
  "policyReasonCode": "HIGH_RISK_MODEL_DEPLOYMENT",
  "evidenceSummary": {
    "model_name": "credit-risk-v2",
    "accuracy": 0.94,
    "bias_score": 0.12
  }
}

Get Review Queue

List pending reviews

GET

Endpoint

/api/v1/hitl/queue?status=pending

Submit Decision

Approve or deny escalated request

POST

Endpoint

/api/v1/hitl/[id]/decision

Agent Governance

Start Agent Session

Create tracked agent session

POST

Endpoint

/api/v1/agents/sessions

Evaluate Tool Request

Request permission to use agent tool

POST

Endpoint

/api/v1/agents/tools/evaluate

Security Alerts

Monitor anomaly detection

GET

Endpoint

/api/v1/agent-security/alerts

Audit Packs

Create Audit Pack

Package evidence for auditors

POST

Endpoint

/api/v1/audit-packs

Request Body

{
  "organizationId": "uuid",
  "packName": "Q2 2026 ML Audit",
  "packType": "quarterly_review",
  "description": "ML model governance review",
  "audience": "external_auditor",
  "timeRangeStart": "2026-04-01T00:00:00Z",
  "timeRangeEnd": "2026-06-30T23:59:59Z"
}

Seal Audit Pack

Finalize and make immutable

POST

Endpoint

/api/v1/audit-packs/[id]/seal

Export Audit Pack

Download as ZIP with evidence

GET

Endpoint

/api/v1/audit-packs/[id]/export

Verify Audit Pack

Verify cryptographic integrity

POST

Endpoint

/api/v1/audit-packs/[id]/verify

Organizations

Create Organization

Set up new tenant

POST

Endpoint

/api/v1/organizations

Add Organization Member

Invite user to organization

POST

Endpoint

/api/v1/organizations/[id]/members

Privacy & GDPR

Acknowledge Data Notice

Record user consent

POST

Endpoint

/api/v1/privacy/acknowledge-notice

Request Data Erasure

GDPR right to be forgotten

POST

Endpoint

/api/v1/privacy/erasure-request

Get Encryption Keys

Retrieve organization encryption keys

GET

Endpoint

/api/v1/privacy/encryption-keys

Public Verification (No Auth Required)

Verify Receipt

Publicly verify receipt integrity

POST

Endpoint

/api/verify/receipt

Request Body

{
  "receiptId": "uuid"
}

Note

No authentication required - evidence is publicly verifiable

Verify Audit Pack

Verify sealed audit package

POST

Endpoint

/api/verify/audit-pack

Verify Vault Object

Verify immutable vault storage

POST

Endpoint

/api/verify/vault

Rate Limits

Starter

1,000 requests/hour

Professional

10,000 requests/hour

Enterprise

Custom limits

Error Codes

400Bad Request - Invalid parameters

401Unauthorized - Invalid or missing API key

403Forbidden - Insufficient permissions

404Not Found - Resource doesn't exist

429Too Many Requests - Rate limit exceeded

500Internal Server Error - Server-side issue

AGEI

API Documentation

RESTful API reference for AGEI integration

Important: Evidence Submission Responsibility

Base URL

https://your-domain.com/api/v1

All API endpoints are prefixed with /api/v1

Authentication

Using Supabase Auth with API keys

Headers Required

Authorization: Bearer YOUR_API_KEY
Content-Type: application/json

Service Role Access

Use SUPABASE_SERVICE_ROLE_KEY for backend operations that bypass RLS.

Quick Navigation

Receipts & Evidence API Access Management Gates & Policies Human-in-the-Loop Agent Governance Audit Packs Organizations Privacy & GDPR Public Verification

Receipts & Evidence

Create Receipt

Record evidence without policy evaluation

POST

Endpoint

/api/v1/receipts

Request Body

{
  "organizationId": "uuid",
  "receiptType": "dataset_ingestion",
  "resourceType": "dataset",
  "resourceId": "customer-data-2026-q2",
  "receiptPayload": {
    "dataset_name": "Customer Feedback Q2",
    "record_count": 15420,
    "quality_score": 0.98
  },
  "upstreamReceiptIds": ["parent-receipt-uuid"],
  "linkType": "derives_from"
}

List Receipts

Query receipts with filters

GET

Endpoint

/api/v1/receipts?start_date=2026-01-01&limit=100

Verify Receipts

Verify cryptographic integrity

POST

Endpoint

/api/v1/receipts/verify

API Access Management

Create API Client

POST

Endpoint

/api/api-clients

Request Body

{
  "client_name": "ML Training Pipeline",
  "client_type": "pipeline",
  "environment": "production",
  "description": "Automated ML training system"
}

Create API Key

Generate authentication credential

POST

Endpoint

/api/api-keys

Request Body

{
  "api_client_id": "client-uuid",
  "key_name": "Production Key 1",
  "environment": "live",
  "expires_at": "2027-01-01T00:00:00Z"
}

⚠️ Important

Raw key returned only once - save immediately!

Grant Service Permissions

Authorize API key to access services

POST

Endpoint

/api/service-grants

Request Body (Bundle)

{
  "api_key_id": "key-uuid",
  "bundle_id": "evidence_submitter",
  "rate_limit_per_minute": 100,
  "monthly_quota": 1000000
}

Gates & Policies

Evaluate Policy Gate

Submit evidence for server-side policy evaluation

POST

Endpoint

/api/v1/gates/evaluate

Request Body

{
  "organizationId": "uuid",
  "gateDefinitionId": "uuid",
  "policyVersionId": "uuid",
  "resourceType": "ml_model",
  "resourceId": "fraud-detector-v2",
  "eventType": "training_completed",
  "eventPayload": {
    "accuracy": 0.94,
    "precision": 0.92,
    "test_samples": 5000
  }
}

Response (200 OK)

{
  "gateOutcome": "approve",
  "evaluationStatus": "pass",
  "decisionReasonCode": "ALL_POLICY_RULES_SATISFIED",
  "passedRules": ["accuracy_gte_0.85", "precision_gte_0.80"],
  "failedRules": [],
  "receiptId": "receipt-uuid",
  "gateEvaluationId": "eval-uuid"
}

Create Policy

Define governance rules

POST

Endpoint

/api/v1/policies

Create Gate

Set up governance checkpoint

POST

Endpoint

/api/v1/gates

Human-in-the-Loop (HITL)

Create HITL Request

Escalate decision to human reviewer

POST

Endpoint

/api/v1/hitl/request

Request Body

{
  "organizationId": "uuid",
  "requestType": "model_deployment",
  "resourceType": "ai_model",
  "resourceId": "model-123",
  "riskClassification": "high",
  "requiredReviewerRole": "model_risk_reviewer",
  "policyReasonCode": "HIGH_RISK_MODEL_DEPLOYMENT",
  "evidenceSummary": {
    "model_name": "credit-risk-v2",
    "accuracy": 0.94,
    "bias_score": 0.12
  }
}

Get Review Queue

List pending reviews

GET

Endpoint

/api/v1/hitl/queue?status=pending

Submit Decision

Approve or deny escalated request

POST

Endpoint

/api/v1/hitl/[id]/decision

Agent Governance

Start Agent Session

Create tracked agent session

POST

Endpoint

/api/v1/agents/sessions

Evaluate Tool Request

Request permission to use agent tool

POST

Endpoint

/api/v1/agents/tools/evaluate

Security Alerts

Monitor anomaly detection

GET

Endpoint

/api/v1/agent-security/alerts

Audit Packs

Create Audit Pack

Package evidence for auditors

POST

Endpoint

/api/v1/audit-packs

Request Body

{
  "organizationId": "uuid",
  "packName": "Q2 2026 ML Audit",
  "packType": "quarterly_review",
  "description": "ML model governance review",
  "audience": "external_auditor",
  "timeRangeStart": "2026-04-01T00:00:00Z",
  "timeRangeEnd": "2026-06-30T23:59:59Z"
}

Seal Audit Pack

Finalize and make immutable

POST

Endpoint

/api/v1/audit-packs/[id]/seal

Export Audit Pack

Download as ZIP with evidence

GET

Endpoint

/api/v1/audit-packs/[id]/export

Verify Audit Pack

Verify cryptographic integrity

POST

Endpoint

/api/v1/audit-packs/[id]/verify

Organizations

Create Organization

Set up new tenant

POST

Endpoint

/api/v1/organizations

Add Organization Member

Invite user to organization

POST

Endpoint

/api/v1/organizations/[id]/members

Privacy & GDPR

Acknowledge Data Notice

Record user consent

POST

Endpoint

/api/v1/privacy/acknowledge-notice

Request Data Erasure

GDPR right to be forgotten

POST

Endpoint

/api/v1/privacy/erasure-request

Get Encryption Keys

Retrieve organization encryption keys

GET

Endpoint

/api/v1/privacy/encryption-keys

Public Verification (No Auth Required)

Verify Receipt

Publicly verify receipt integrity

POST

Endpoint

/api/verify/receipt

Request Body

{
  "receiptId": "uuid"
}

Note

No authentication required - evidence is publicly verifiable

Verify Audit Pack

Verify sealed audit package

POST

Endpoint

/api/verify/audit-pack

Verify Vault Object

Verify immutable vault storage

POST

Endpoint

/api/verify/vault

Rate Limits

Starter

1,000 requests/hour

Professional

10,000 requests/hour

Enterprise

Custom limits

Error Codes

400Bad Request - Invalid parameters

401Unauthorized - Invalid or missing API key

403Forbidden - Insufficient permissions

404Not Found - Resource doesn't exist

429Too Many Requests - Rate limit exceeded

500Internal Server Error - Server-side issue