Docs menuREST API Reference

Getting Started

Introduction Quickstart (5 min)Core Concepts SDK Installation

Intents & Receipts

Intent Declaration Policy Configuration Human Verification Receipt Verification

Integrations

Agent Setup Guide AI Agents GitHub Actions Terraform Custom Webhooks

Advanced

Offline Verification Multi-Party Approval Audit Logs

Reference

REST API Reference VINAC-FM Integration Guide Error Codes Rate Limits SDKs & Libraries

Logos: Overview

Introduction Core Concepts Quickstart

Logos: CSIV Vocabulary

Vocabulary Reference Token Structure Namespaces Risk Tiers

Logos: Local Resolution

Local Resolution Verify and Resolve Execution Boundary Fail-Closed Rules

Logos: SDK Reference

SDK Overview Installation Compile Vocabulary Verify and Resolve

Logos: Integrations

VINAC-FM Transport Agent Tool Adapter AI Agents REST API

ReferenceAPI Reference

API Reference

SilentAuth preview APIs are centered on intent submission, policy resolution, receipt verification, and protected connector testing.

Base URL

https://api.silentauth.ai

Authentication

Use a project API key from the dashboard for server-side requests.

Authorization: Bearer sa_live_project_key

Endpoints

POST

/api/intents

Create an approval request for a protected action.

GET

/api/intents?status=pending

List intent requests for the authenticated user.

GET

/api/intents/:id

Read a single request, including status and receipt metadata.

PATCH

/api/intents/:id

Approve or deny a pending request.

POST

/api/intents/permit/verify

Verify an execution permit before running the action.

GET

/api/mcp-gateway

List protected mock tools owned by SilentAuth.

POST

/api/mcp-gateway

Create or execute a protected mock connector request.

POST

/api/verify/proof

Submit proof session signals for local proof workflows.

Example flow

Create an intent:

POST /api/intents
Authorization: Bearer sa_live_project_key
Content-Type: application/json

{
  "source_type": "agent",
  "source": "deployment-runner",
  "action": "production.deploy",
  "risk_tier": "high",
  "context": {
    "environment": "production",
    "version": "2026.06.18"
  },
  "proof_tier": "stub_vinacfm_l3"
}

Receive a signed receipt after approval:

{
  "id": "int_abc123",
  "status": "approved",
  "permit_token": "eyJhbGciOi...",
  "receipt_v2": {
    "receipt_version": 2,
    "params_hash": "sha256:8f4...",
    "policy_hash": "sha256:19d...",
    "proof_tier": "stub_vinacfm_l3",
    "kid": "local-hmac-v2",
    "revocation_status": "active",
    "receipt_expires_at": "2026-06-18T21:05:00.000Z"
  }
}

Error Codes

Code	Description
UNAUTHORIZED	Missing or invalid session or project API key.
MISSING_FIELDS	The request is missing required fields such as action or source_type.
AGENT_PAUSED	The registered agent is paused and cannot submit intents.
AGENT_REVOKED	The registered agent has been revoked.
INVALID_PERMIT	The receipt or permit token is not valid for the exact action and parameters.
RATE_LIMITED	The endpoint received too many requests in the current window.

← Back to Documentation