API reference

The Oris HTTP API exposes 184 endpoints across 26 domains. Every endpoint requires Ed25519 request signing with a thirty-second nonce TTL.

Authentication

Every request needs four headers:

Authorization: oris_sk_live_...
X-Request-Signature: <hex>
X-Timestamp: <unix-epoch>
X-Nonce: <unique-token>

The canonical payload that the signature covers is:

{timestamp}.{nonce}.{METHOD}.{path}.{SHA256(body)}

See the authentication guide for the full signing flow with Python and TypeScript examples.

Groups

• Agents — 5 endpoints · AI agent profiles and KYA lifecycle
• Attestations — 6 endpoints
• Audit — 8 endpoints
• Billing — 6 endpoints · Stripe billing and usage metering
• Compliance — 5 endpoints
• Dashboard — 51 endpoints · Developer dashboard analytics
• Demo — 1 endpoint
• Developers — 23 endpoints · Developer registration and API key management
• External KYA — 2 endpoints
• Fiat — 7 endpoints
• Health — 1 endpoint · Service health and liveness probes
• KYA — 1 endpoint
• KYA Intelligence — 6 endpoints
• Micropayments — 6 endpoints · Streaming micropayment channels
• Payments — 3 endpoints · Payment execution and settlement
• Policies — 5 endpoints · Spending policy CRUD and evaluation
• Projects — 15 endpoints
• Promotions — 3 endpoints
• Resolve — 5 endpoints
• Routing — 2 endpoints
• Sandbox — 3 endpoints
• Verifier — 2 endpoints
• Verify — 1 endpoint
• Wallets — 8 endpoints · Agent wallet operations and balance management
• Webhooks — 5 endpoints
• Whitelabel — 4 endpoints

---

API spec fetched from https://api.useoris.xyz/openapi.json at build time. Spec version: 1.0.0.