Evaluate at the edge
POST an ActionIntent. Get allow, deny, or wait — attributed to the org token, with a scrubbed audit projection.
Hosted · Cloud action governance API
Govern agent side effects before they hit production.
This is the Limetry Cloud BFF. Portal sessions and scoped org API keys call it to evaluate ActionIntents, manage rules and tokens, and read usage / billing — with evaluate proxied to the open-source kernel when configured.
Org control plane
Rules, agents, approvals, and API keys for the Cloud portal — freemium meters and retention included.
Plugin-ready contract
Same OpenAPI used by Custom GPT / Gemini imports. Auth with a scoped bearer key from the portal.
Available paths
Generated from packages/plugin/openapi.yaml. Most routes need a portal JWT or scoped API key.
OpenAPI and Swagger UI are public for now (will require auth in production later).
| Method / path | Auth | Purpose |
|---|---|---|
GET / |
none | This landing page |
GET /openapi.yaml |
none | OpenAPI 3.1 document (public for now) |
GET /openapi.json |
none | OpenAPI JSON (public for now) |
GET /openapi |
none | Swagger UI for this API |
GET /health |
none | Health check |
GET /v1/agents |
bearer · JWT or API key | List governed agents and kill-switch status |
POST /v1/agents |
bearer · JWT or API key | Register a governed agent |
PATCH /v1/agents/{agentId}/status |
bearer · JWT or API key | Enable or disable an agent |
GET /v1/authorizations |
bearer · JWT or API key | List organization evaluate and receipt history |
GET /v1/authorizations/export |
bearer · JWT or API key | Export business-plan authorization history as CSV |
POST /v1/billing/checkout |
bearer · JWT or API key | Create a Stripe subscription checkout |
POST /v1/billing/portal |
bearer · JWT or API key | Create a Stripe customer portal session |
GET /v1/billing/subscription |
bearer · JWT or API key | Return the organization subscription and plan |
POST /v1/governance/authorize |
bearer · JWT or API key | Legacy alias — maps to ActionIntent evaluate |
GET /v1/hosted/config |
bearer · JWT or API key | Public hosted Free API base URL and Free plan limits for connect-agent UX |
GET /v1/ops/usage |
bearer · JWT or API key | Operator cost and abuse snapshot (service bearer only) |
GET /v1/policies |
bearer · JWT or API key | List persisted organization policy versions |
POST /v1/policies/register |
bearer · JWT or API key | Register an ActionPolicy with the evaluation engine |
POST /v1/policy/evaluate |
bearer · JWT or API key | Evaluate an ActionIntent against a registered ActionPolicy |
GET /v1/rules |
bearer · JWT or API key | List governance rules for the authenticated organization |
POST /v1/rules |
bearer · JWT or API key | Create a new governance rule |
DELETE /v1/rules/{ruleId} |
bearer · JWT or API key | Delete a governance rule |
PATCH /v1/rules/{ruleId} |
bearer · JWT or API key | Update a governance rule |
GET /v1/tokens |
bearer · JWT or API key | List API tokens for the authenticated user |
POST /v1/tokens |
bearer · JWT or API key | Create a scoped API token |
DELETE /v1/tokens/{tokenId} |
bearer · JWT or API key | Revoke an API token |
GET /v1/usage/summary |
bearer · JWT or API key | Return plan meters, retention, and upgrade hints |
Try health + OpenAPI
Against this host (local default http://localhost:3820):
curl -s https://api.app.limetry.com/health
curl -s https://api.app.limetry.com/openapi.yaml | head
curl -s -X POST https://api.app.limetry.com/v1/policy/evaluate \
-H "Authorization: Bearer $LIMETRY_API_KEY" \
-H "Content-Type: application/json" \
-d '{"policy_id":"'"$POLICY_ID"'","intent":{ ... ActionIntent ... }}'