API ReferenceDemo
Purchases waiting for the user
Purchases the gate sent to the user (over a soft limit), with when each request expires.
Query Parameters
mandateId?string
Only this mandate's approvals. Omit for all.
Response Body
application/json
curl -X GET "https://example.com/api/approvals"[ { "id": "string", "mandateId": "string", "status": "string", "expiresAt": "2019-08-24T14:15:22Z" }]Let the shopping agent carry out a task under a mandate POST
The agent can only search, read and propose. Each proposal goes through the policy gate, which pays, asks the user, or blocks. With `stream: true` the response is NDJSON, one step per line.
Approve or decline a purchase POST
If the user has a passkey, approving needs a WebAuthn assertion over this exact cart (challenge from `GET /api/approvals/{id}/passkey`). Hard rules (category, seller, injected instructions) can never be approved through.