Policies

POST /api/v1/oris/policies

Create spending policy

Create a new spending policy for an agent. Policies are evaluated in priority order.

Auth: Ed25519 request signing. Send Authorization, X-Request-Signature, X-Timestamp, and X-Nonce headers on every call. Nonce TTL is thirty seconds.

Request body

application/json, schema: PolicyCreateRequest

Responses

Status	Description
201	Successful Response
422	Validation Error

Example request

curl -X POST 'https://api.useoris.xyz/api/v1/oris/policies' \
  -H 'Authorization: oris_sk_live_***' \
  -H 'X-Request-Signature: ***' \
  -H 'X-Timestamp: $(date +%s)' \
  -H 'X-Nonce: $(uuidgen)' \
  -H 'Content-Type: application/json' \
  -d '{...}'

DELETE /api/v1/oris/policies/{policy_id}

Delete spending policy

Permanently delete a spending policy.

Auth: Ed25519 request signing. Send Authorization, X-Request-Signature, X-Timestamp, and X-Nonce headers on every call. Nonce TTL is thirty seconds.

Path parameters

Name	Type	Required	Description
policy_id	string	Yes

Responses

Status	Description
204	Successful Response
422	Validation Error

Example request

curl -X DELETE 'https://api.useoris.xyz/api/v1/oris/policies/{policy_id}' \
  -H 'Authorization: oris_sk_live_***' \
  -H 'X-Request-Signature: ***' \
  -H 'X-Timestamp: $(date +%s)' \
  -H 'X-Nonce: $(uuidgen)'

PATCH /api/v1/oris/policies/{policy_id}

Update spending policy

Update a spending policy. Invalidates the policy cache.

Auth: Ed25519 request signing. Send Authorization, X-Request-Signature, X-Timestamp, and X-Nonce headers on every call. Nonce TTL is thirty seconds.

Path parameters

Name	Type	Required	Description
policy_id	string	Yes

Request body

application/json, schema: PolicyUpdateRequest

Responses

Status	Description
200	Successful Response
422	Validation Error

Example request

curl -X PATCH 'https://api.useoris.xyz/api/v1/oris/policies/{policy_id}' \
  -H 'Authorization: oris_sk_live_***' \
  -H 'X-Request-Signature: ***' \
  -H 'X-Timestamp: $(date +%s)' \
  -H 'X-Nonce: $(uuidgen)' \
  -H 'Content-Type: application/json' \
  -d '{...}'

GET /api/v1/oris/policies/agent/{agent_id}

List agent policies

List all spending policies for an agent, sorted by priority.

Auth: Ed25519 request signing. Send Authorization, X-Request-Signature, X-Timestamp, and X-Nonce headers on every call. Nonce TTL is thirty seconds.

Path parameters

Name	Type	Required	Description
agent_id	string	Yes

Responses

Status	Description
200	Successful Response
422	Validation Error

Example request

curl -X GET 'https://api.useoris.xyz/api/v1/oris/policies/agent/{agent_id}' \
  -H 'Authorization: oris_sk_live_***' \
  -H 'X-Request-Signature: ***' \
  -H 'X-Timestamp: $(date +%s)' \
  -H 'X-Nonce: $(uuidgen)'

POST /api/v1/oris/policies/evaluate

Dry-run policy evaluation

Simulate a transaction against an agent's active policies without executing the payment. Returns the evaluation result.

Auth: Ed25519 request signing. Send Authorization, X-Request-Signature, X-Timestamp, and X-Nonce headers on every call. Nonce TTL is thirty seconds.

Request body

application/json, schema: PolicyEvaluateRequest

Responses

Status	Description
200	Successful Response
422	Validation Error

Example request

curl -X POST 'https://api.useoris.xyz/api/v1/oris/policies/evaluate' \
  -H 'Authorization: oris_sk_live_***' \
  -H 'X-Request-Signature: ***' \
  -H 'X-Timestamp: $(date +%s)' \
  -H 'X-Nonce: $(uuidgen)' \
  -H 'Content-Type: application/json' \
  -d '{...}'