Skip to main content
POST
Simulate an action

Authorizations

Authorization
string
header
required

An agent API key, krt_live_... or krt_test_..., shown exactly once at creation. Kordio stores only a digest. This credential can ask for authorization and can never write policy.

Body

application/json
budget_id
string<uuid>
required

An active session belonging to this agent.

action_type
string
required

Lowercase, dot separated.

Pattern: ^[a-z][a-z0-9_]*(\.[a-z][a-z0-9_]*)*$
Example:

"payment.create"

resource
string | null

The counterparty or target. Matched by allowlists.

Example:

"acme-supplies.example"

cost_cents
integer
default:0

Minor units. Omit or 0 for an action that spends nothing.

Required range: x >= 0
metadata
object

Any dot path here is addressable from the condition language as metadata.*.

trace_id
string | null

Yours if you have one, generated otherwise. Links the whole audit trail.

Response

The decision that would have been produced. No id, because no intent exists.

data
object
required