API Reference

All endpoints are REST. The base URL is http://localhost:8000 (or http://localhost:8000 for local development).

Authentication

AI Guardian uses two authentication mechanisms:

• API Key — for proxy requests. Pass as Authorization: Bearer aig_.... API keys are tenant-scoped and start with aig_.
• JWT Token — for dashboard API endpoints. Obtain via POST /api/v1/admin/login. Pass as Authorization: Bearer <jwt>.

Get JWT Token

curl -X POST http://localhost:8000/api/v1/admin/login \
  -H "Content-Type: application/json" \
  -d '{"email": "admin@example.com", "password": "yourpassword"}'

Response:

{"access_token": "eyJ...", "token_type": "bearer"}

Proxy

OpenAI-compatible Chat Completions endpoint. Send requests in the exact same format as the OpenAI API. AI Guardian filters the request, routes it, and returns either the LLM response or an error.

curl -X POST http://localhost:8000/api/v1/proxy/chat/completions \
  -H "Authorization: Bearer aig_YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "gpt-4o",
    "messages": [{"role": "user", "content": "Hello!"}]
  }'

Responses

Review Queue

List review items for the current tenant. Supports ?status=pending|approved|rejected, limit, and offset query params.

Get a single review item with its associated request.

Submit a decision for a review item.

{ "decision": "approve" | "reject" | "escalate", "note": "optional string" }

Audit Logs

List audit log entries for the current tenant. Query params: event_type, severity, limit (max 500), offset. Results are ordered by created_at descending.

Admin

Authenticate with email + password. Returns JWT access token.

Get the current user profile.

Get the active policy for a tenant.

Update the active policy for a tenant.

Generate a new API key for the current tenant.

Error Codes