# APort API

The APort API verifies proposed AI agent actions before execution and records
audit decisions for hosted customers.

## Discovery

- OpenAPI: https://aport.io/api/openapi-json
- Human API docs: https://aport.io/api/documentation
- API catalog: https://aport.io/.well-known/api-catalog
- Auth guide: https://aport.io/auth.md

## Core endpoints

- `POST /api/verify/policy/{policy_id}`: verify a proposed action.
- `GET /api/policies`: list policy packs.
- `GET /api/schema/capabilities-limits`: inspect passport capability fields.
- `GET /api/public/framework-passport-presets`: framework preset metadata.
- `GET /api/passports/{agent_id}`: fetch a hosted passport when authorized.
- `GET /api/verify/{agent_id}`: public verification view for a passport.

## Authentication

Use `X-API-Key: apk_...` for service-to-service calls. See
[auth.md](https://aport.io/auth.md) for credential guidance.

## Example

```http
POST https://aport.io/api/verify/policy/system.command.execute.v1
X-API-Key: apk_...
Content-Type: application/json

{
  "context": {
    "agent_id": "ap_...",
    "command": "npm test",
    "cwd": "/repo"
  }
}
```