APort API reference

Explore passport APIs, policy verification, authentication, and response shapes.

🚀 Quick Links

🌐 Website 💻 GitHub 📚 Guides 📄 OpenAPI Spec

🔐 Authentication Methods

✓ No Authentication

Public verification endpoints - no credentials required.


              GET /api/verify/*

🔑 API Keys

Server-to-server access with API key authentication.


              X-API-Key: apk_...

🛡️ JWT Tokens

User session tokens for interactive applications.


              Bearer eyJ0eXAi...

💡 Pro Tip: Click the Authorize button at the top to configure authentication for "Try It Out" requests. Your credentials will be persisted across page refreshes.

🛡️ AI Agent Guardrails & Policy Enforcement

Policy packs check passport capabilities, limits, and action context before execution. The verifier returns an allow or deny decision with reasons.

Finance Guardrails

Payment limits, refund controls

System Guardrails

Command execution, tool safety

Web Guardrails

Fetch controls, browser safety

⚡ Getting Started with AI Agent Guardrails

Create AI passport - Establish cryptographic agent identity
Attach guardrail policies - Use prebuilt policies from /policy-packs
Verify before execution - Call /api/verify/policy/{pack_id}
Get cryptographic proof - Receive signed, tamper-evident decision records

✨ New to AI Agent Guardrails? Check out our resources:

Quickstart Guide Builder (Visual) Policy Packs OpenClaw Guardrails