API Reference

Base URL:

https://api-warrant.abstraxn.com/v1/warrant

Send your API key as header:

x-api-key: <your key>

Or Authorization: Bearer <key> / ?apikey= depending on your client.

Authentication

Endpoint type	Key
Create / list mandates	Application API key
`POST /decisions` (`check`)	Mandate API key
Dashboard mandate list	User JWT via User-Service (not Warrant host)

Main endpoints

Health

GET /health

Returns service status and store mode (postgres in production).

Create mandate

POST /mandates

Application API key. Body includes signed rules, agent_id, domain, owner_signature. Response includes id, status, and apiKey (mandate key — once).

Check (decision)

POST /decisions

Mandate API key. Body is a normalized action (agent_id, domain, action_type, value, …). Response:

{
  "decision_id": "…",
  "verdict": "ALLOW",
  "reasons": [],
  "receipt_id": "rcpt_dec_…",
  "receipt": { "…signed receipt…" }
}

List mandates (dashboard)

Via User-Service (authenticated dashboard user):

GET /users/app/kyi/mandates?appId=<uuid>&page=1&limit=10

List decisions for a mandate

GET /users/app/kyi/mandates/{mandateId}/decisions?appId=<uuid>&page=1&limit=10

Public receipt key (auditors)

GET /keys/receipt

Returns Ed25519 public key for offline receipt verification.

Fetch receipt by id (auditors)

GET /receipts/{receiptId}

Returns full receipt JSON including on-chain fields when batch is published.

Verdict values

Value	Meaning
`ALLOW`	Action permitted under mandate rules
`DENY`	Action blocked by rules
`ESCALATE`	Needs human review

Common reason codes

Code	Meaning
`AMOUNT_EXCEEDS_LIMIT`	Over max per action
`COUNTERPARTY_NOT_ALLOWED`	Address not on allowlist
`CATEGORY_DENIED`	Item category blocked
`NO_ACTIVE_MANDATE`	No matching mandate
`WARRANT_UNREACHABLE`	SDK fail-closed when API down

SDK vs REST

Prefer @abstraxn/warrant for TypeScript backends — it handles canonicalization, seals, and error defaults. See SDK quickstart.

Next step

Verify receipts — prove a decision offline.

Getting started

Build

Audit & on-chain

Authentication

Main endpoints

Health

Create mandate

Check (decision)

List mandates (dashboard)

List decisions for a mandate

Public receipt key (auditors)

Fetch receipt by id (auditors)

Verdict values

Common reason codes

SDK vs REST

Next step

​Authentication

​Main endpoints

​Health

​Create mandate

​Check (decision)

​List mandates (dashboard)

​List decisions for a mandate

​Public receipt key (auditors)

​Fetch receipt by id (auditors)

​Verdict values

​Common reason codes

​SDK vs REST

​Next step

Authentication

Main endpoints

Health

Create mandate

Check (decision)

List mandates (dashboard)

List decisions for a mandate

Public receipt key (auditors)

Fetch receipt by id (auditors)

Verdict values

Common reason codes

SDK vs REST

Next step