Integrating /v1/check - Clawb AI

Your relying service should call /v1/check immediately before sensitive operations.

Auth

X-Clawb-Api-Key: ck_live_...

For action: "send_email", include email object fields so policy constraints can evaluate recipients and attachments.

curl -sS -X POST "https://api.clawb.ai/api/v1/check" \
  -H "Content-Type: application/json" \
  -H "X-Clawb-Api-Key: ck_live_replace_me" \
  -d '{
    "agent_id": "agt_replace_me",
    "policy_id": "pol_default",
    "action": "refund",
    "context": {
      "amount": 49.0,
      "currency": "USD",
      "reason": "late_delivery"
    }
  }'

from clawb_agent_sdk import ClawbClient, WorkspaceControlPlane

client = ClawbClient(base_url="https://api.clawb.ai/api")
provider = WorkspaceControlPlane(client=client, api_key="ck_live_...")

decision = provider.check(
    agent_id="agt_01...",
    policy_id="pol_default",
    action="refund",
    context={"amount": 49.0, "currency": "USD"},
)

if decision["decision"] == "allow":
    # Execute the business action.
    pass
elif decision["decision"] == "challenge":
    # Route to approval workflow.
    pass
else:
    # Deny safely.
    pass

Response

{
  "decision": "allow",
  "confidence": 0.9,
  "reasons": ["agent_key_attested"]
}

When challenged:

{
  "decision": "challenge",
  "challenge": {"type": "attest", "url": "..."}
}