> ## Documentation Index
> Fetch the complete documentation index at: https://docs.layer3x.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Rest API

## Base URL

```text theme={null}
https://api.layer3x.com/v1
```

## Authorize endpoint

```text theme={null}
POST /authorize
```

### Headers

| Header               | Required | Description                        |
| -------------------- | -------- | ---------------------------------- |
| `Content-Type`       | Yes      | `application/json`                 |
| `X-Agent-API-Key`    | Yes      | Your agent's API key               |
| `X-Layer3-Signature` | No       | HMAC-SHA256 signature (if enabled) |

### Request body

```json theme={null}
{
  "action_key": "payments.release",
  "payload": {
    "amount": 5000,
    "currency": "USD",
    "vendor": "Acme Corp",
    "description": "Invoice #1042"
  }
}
```

### Response

```json theme={null}
{
  "request_id": "uuid",
  "decision": "ALLOW | DENY | ESCALATE | REAUTH_REQUIRED",
  "reason": "Human-readable reason",
  "matched_policy": "Policy name that matched",
  "risk_score": 0,
  "status": "auto_approved | pending | rejected",
  "message": "Action message",
  "expires_at": "ISO timestamp"
}
```

### Decision values

| Decision          | Signal       | Meaning                    |
| ----------------- | ------------ | -------------------------- |
| `ALLOW`           | 🟢 GO        | Execute — policy validated |
| `DENY`            | 🔴 NO-GO     | Blocked — do not execute   |
| `ESCALATE`        | ⚪ ESCALATED  | Human approval required    |
| `REAUTH_REQUIRED` | 🟡 EXCEPTION | Step-up auth required      |

### Error codes

| Status | Meaning                    |
| ------ | -------------------------- |
| 200    | Request processed          |
| 400    | Invalid request format     |
| 401    | Invalid or missing API key |
| 403    | Agent disabled or revoked  |
| 429    | Rate limit exceeded        |
| 500    | Internal server error      |

## Code examples

<CodeGroup>
  ```javascript Node.js theme={null}
  const response = await fetch('https://api.layer3x.com/v1/authorize', {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
      'X-Agent-API-Key': process.env.LAYER3X_API_KEY
    },
    body: JSON.stringify({
      action_key: 'payments.release',
      payload: {
        amount: 5000,
        vendor: 'Acme Corp',
        currency: 'USD'
      }
    })
  })

  const { decision, reason, request_id } = await response.json()

  if (decision === 'ALLOW') {
    // proceed with payment execution
  } else if (decision === 'ESCALATE') {
    // notify human approver, pause execution
  } else {
    // blocked — log and stop
  }
  ```

  ```python Python theme={null}
  import requests

  response = requests.post(
      'https://api.layer3x.com/v1/authorize',
      headers={
          'Content-Type': 'application/json',
          'X-Agent-API-Key': os.environ['LAYER3X_API_KEY']
      },
      json={
          'action_key': 'payments.release',
          'payload': {
              'amount': 5000,
              'vendor': 'Acme Corp',
              'currency': 'USD'
          }
      }
  )

  data = response.json()

  if data['decision'] == 'ALLOW':
      # proceed
      pass
  elif data['decision'] == 'ESCALATE':
      # human review required
      pass
  ```

  ```bash cURL theme={null}
  curl -X POST https://api.layer3x.com/v1/authorize \
    -H "Content-Type: application/json" \
    -H "X-Agent-API-Key: YOUR_API_KEY" \
    -d '{
      "action_key": "payments.release",
      "payload": {
        "amount": 5000,
        "vendor": "Acme Corp",
        "currency": "USD"
      }
    }'
  ```
</CodeGroup>