# AlfaNest Labs API

**Canonical:** https://apis.io/apis/alfanestlabs-com/alfanestlabs-com-api/  
**Provider:** AlfaNest Labs — https://apis.io/providers/alfanestlabs-com/  
**Documentation:** https://alfanestlabs.com/agent-security

AlfaNest Labs API is one of 2 APIs that [AlfaNest Labs](https://apis.io/providers/alfanestlabs-com/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. The published artifact set on APIs.io includes an OpenAPI specification and 6 JSON Schemas.

AlfaNest Labs API as documented publicly: 47 operations. Contract generated from the documentation by API Evangelist (2026-11-01); not the provider's own document.

## Operations (47)

| Method | Path | Summary |
|---|---|---|
| POST | `/api/agent-security/v1/decide` | Agent Security is an HTTP policy gate in front of a tool call. |
| POST | `/api/auth/login` | POST /api/auth/login |
| POST | `/api/auth/login/2fa` | Finish a 2FA sign-in with tempToken and the 6-digit code. |
| POST | `/api/auth/register` | Public Create a Clearance account. |
| GET | `/api/clearance/packages` | GET /api/clearance/packages |
| GET | `/api/clearance/v1/feed` | Public, anonymous list of the latest 20 evaluations |
| POST | `/api/clearance/v1/test/package` | POST /api/clearance/v1/test/package runs a full package on projectData without creating a project. |
| POST | `/api/clearance/v1/test/run` | POST /api/clearance/v1/test/run runs one control on projectData without creating a project. |
| GET | `/api/dashboard/summary` | GET /api/dashboard/summary provides your projects and last 30 purchases. |
| POST | `/api/machine-identity/v1/attest` | POST /api/machine-identity/v1/attest checks the hash against the declared and enrolled value, issues a gated session_id (or checks the one you pass), then ap... |
| POST | `/api/machine-identity/v1/authorize` | POST /api/machine-identity/v1/authorize enrolls the declared SHA-256 in RAM. |
| POST | `/api/machine-identity/v1/correlate` | Correlate a snapshot with an API Risk scan, compare two snapshots, resolve a queue item. |
| GET | `/api/machine-identity/v1/keys` | Create, list or revoke Machine Identity API keys. |
| POST | `/api/machine-identity/v1/keys` | Create, list or revoke Machine Identity API keys. |
| DELETE | `/api/machine-identity/v1/keys/{id}` | Create, list or revoke Machine Identity API keys. |
| POST | `/api/machine-identity/v1/manifest/compare` | Correlate a snapshot with an API Risk scan, compare two snapshots, resolve a queue item. |
| PATCH | `/api/machine-identity/v1/queue/{id}` | Correlate a snapshot with an API Risk scan, compare two snapshots, resolve a queue item. |
| POST | `/api/objects` | Inspect a payload without a spec. |
| GET | `/api/objects/{objectid}` | Read a stored object by its id. |
| GET | `/api/projects` | GET /api/projects |
| POST | `/api/projects` | POST /api/projects creates an intake. |
| POST | `/api/projects/{id}/run` | POST /api/projects/{id}/run |
| POST | `/api/public/scans` | POST /api/public/scans adds your recent free F01 scan of a contract to the public activity feed. |
| GET | `/api/public/verify/{id}` | Public lookup by project id |
| GET | `/api/scan` | Your scan history, one scan, or its Markdown report. |
| POST | `/api/scan` | Scan one spec: openapi_url (https), openapi_yaml or openapi_json. |
| GET | `/api/scan/{scanid}` | Your scan history, one scan, or its Markdown report. |
| GET | `/api/scan/{scanid}/report` | Your scan history, one scan, or its Markdown report. |
| POST | `/api/scan/compare` | Compare two OpenAPI specs |
| GET | `/api/scan/compare/{compareid}/report` | Get Markdown compare report for a specific compare run |
| GET | `/api/stats/projects` | Public: the last 5 projects and free scans, with masked ids |
| POST | `/api/stripe/checkout` | POST /api/stripe/checkout |
| POST | `/api/veridex-stripe/checkout` | Start a Stripe subscription checkout. |
| GET | `/api/veridex-stripe/plans` | Public plan catalog. |
| POST | `/api/veridex-stripe/quote-checkout` | Pay a signed quote through Stripe. |
| POST | `/api/veridex-stripe/verify` | Confirm a Checkout session and apply the plan or mark the quote as paid. |
| POST | `/api/veridex-stripe/webhook` | Stripe webhook endpoint. |
| POST | `/api/veridex/enroll` | Enroll an agent or rotate its hash. |
| POST | `/api/veridex/projects/keys` | Create a project key. |
| DELETE | `/api/veridex/projects/keys/{keyid}` | Revoke a project key. |
| POST | `/api/veridex/run` | POST /api/veridex/run |
| POST | `/api/veridex/v1/audit/runs` | POST /api/veridex/v1/audit/runs |
| GET | `/api/veridex/v1/frameworks/catalog` | Public catalog of controls and framework mappings. |
| GET | `/api/veridex/v1/frameworks/selection` | Get the frameworks evaluated on your next runs. |
| PUT | `/api/veridex/v1/frameworks/selection` | Save the framework selection for future runs. |
| POST | `/v1/attest` | POST /v1/attest 将哈希与声明值和已注册值比对，签发受控会话 session_id（或校验您传入的 session_id），然后执行熔断检查 |
| POST | `/v1/authorize` | POST /v1/authorize (declared-hash check, attestExecution, gated session_id, circuit breaker). |

## Machine-readable artifacts (7)

- **OpenAPI** — https://artifacts.apis.io/alfanestlabs-com/openapi/_ae-authored/alfanestlabs-com-openapi-generated.yml
- **JSONSchema** — https://artifacts.apis.io/alfanestlabs-com/json-schema/alfanestlabs-com-post-api-veridex-run-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/alfanestlabs-com/json-schema/alfanestlabs-com-post-api-scan-compare-request-schema.json
- **JSONSchema** — https://artifacts.apis.io/alfanestlabs-com/json-schema/alfanestlabs-com-get-api-public-verify-id-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/alfanestlabs-com/json-schema/alfanestlabs-com-post-api-veridex-run-request-schema.json
- **JSONSchema** — https://artifacts.apis.io/alfanestlabs-com/json-schema/alfanestlabs-com-post-api-projects-id-run-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/alfanestlabs-com/json-schema/alfanestlabs-com-post-api-agent-security-v1-decide-request-schema.json

## Other AlfaNest Labs APIs (1)

- [Veridex API](https://apis.io/apis/alfanestlabs-com/veridex-api/)

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/alfanestlabs-com/alfanestlabs-com-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/alfanestlabs-com/.