Docs · API Reference

REST + gRPC. Same engine. Same guarantees.

All endpoints are versioned, authenticated with workspace API keys, and rate-limited per tier. gRPC is recommended for inline robotics use.

Auth

Authorization: Bearer bnd_live_<workspace_token>

Endpoints

POST
/v1/check

Evaluate an action against active policy. Returns allow / deny / escalate in microseconds.

POST
/v1/approve

Confirm a pending escalation with a human-approval token.

GET
/v1/decisions

Query the tamper-evident decision log.

GET
/v1/policies

List policy bundles active on a workspace.

POST
/v1/policies

Publish a new policy bundle (signed).

Example · POST /v1/check

curl -X POST https://api.boundaryai.ai/v1/check \
  -H "Authorization: Bearer bnd_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "action": "payment.send",
    "resource": "wire://us-bank/acct-9912",
    "actor": { "agent": "finance-bot" },
    "context": { "amount_usd": 50000, "counterparty_new": true }
  }'

# => { "decision": "escalate", "reason": "new_counterparty_over_threshold", "token": "esc_..." }