Developer API

Signed agent actions, governed before execution.

Sentinel SCA lets teams enroll Ed25519 agent identities, submit signed actions to /analyze, receive allow/deny/review decisions, and export tenant-scoped evidence.

Health & Readiness

  • GET /health basic health
  • GET /live process liveness
  • GET /ready Redis, tenant DB, and audit path readiness

Request IDs

Send X-Request-ID with any request. Sentinel echoes it in the response. If missing, Sentinel generates one.

Signed Analyze

POST /analyze
X-Agent-ID: agent_xxx
X-Signature: base64-ed25519-signature
X-Timestamp: 2026-06-07T12:00:00Z
X-Timestamp-Unix: 1780833600

Agent Enrollment

Customers can generate a new agent keypair or enroll an existing Ed25519 public key. BYOK enrollment returns a live tenant-scoped agent_id.

Evidence Exports

  • /customer/export/audit.json
  • /customer/export/decisions.csv
  • /customer/export/evidence.zip

Billing Webhooks

Paddle webhook signatures are enforced. Unsigned webhook calls are rejected.