Docs · API Reference
REST + gRPC. Same engine. Same guarantees.
All endpoints are versioned, authenticated with workspace API keys, and rate-limited per tier. gRPC is recommended for inline robotics use.
Auth
Authorization: Bearer bnd_live_<workspace_token>Endpoints
POST
/v1/checkEvaluate an action against active policy. Returns allow / deny / escalate in microseconds.
POST
/v1/approveConfirm a pending escalation with a human-approval token.
GET
/v1/decisionsQuery the tamper-evident decision log.
GET
/v1/policiesList policy bundles active on a workspace.
POST
/v1/policiesPublish a new policy bundle (signed).
Example · POST /v1/check
curl -X POST https://api.boundaryai.ai/v1/check \
-H "Authorization: Bearer bnd_live_..." \
-H "Content-Type: application/json" \
-d '{
"action": "payment.send",
"resource": "wire://us-bank/acct-9912",
"actor": { "agent": "finance-bot" },
"context": { "amount_usd": 50000, "counterparty_new": true }
}'
# => { "decision": "escalate", "reason": "new_counterparty_over_threshold", "token": "esc_..." }