BrainstormRouter

BrainstormRouter Governance API

The governance API from BrainstormRouter — 52 operation(s) for governance.

GitHub OpenAPI

Operations 58

GET /auth/governance/audit/chain/verify Verify the hash-chain integrity of the tenant's recent audit window #
GET /auth/governance/audit/ledger Recent chained audit rows projected for the Ledger view (+ head hash) #
POST /auth/governance/audit/sign Detached tenant-HMAC over a caller-supplied entry. #
POST /auth/governance/audit/verify Check a detached tenant-HMAC. #
GET /auth/governance/behavioral-profiles List behavioral profiles for the tenant #
DELETE /auth/governance/behavioral-profiles/{role} Delete a behavioral profile by role (admin) #
PUT /auth/governance/behavioral-profiles/{role} Create or update a behavioral profile for a role (admin) #
GET /auth/governance/compliance PII scan over the tenant's core memory entries #
GET /auth/governance/plans List the tenant's request-scoped liaison plans (read-only; distinct from grants) #
POST /auth/governance/policy/dry-run Dry-run the tenant policy engine against a hypothetical action #
POST /auth/governance/scope-check Dry multi-source scope composition (per-source lanes, no enforcement side… #
GET /auth/governance/scope-enforcement Per-source scope enforcement: configured vs effective (cohort-aware, R6) #
GET /auth/governance/would-deny Would-deny preview: warn-mode denials over an adjustable lookback, deduped #
GET /auth/grants List grants for the tenant (filter by subject / status / root / capability) #
GET /auth/grants/{id} Fetch a grant record + verified chain summary #
GET /auth/grants/{id}/chain Export the per-link-verifiable chain bundle (envelopes + signatures + JWKS ref) #
POST /auth/grants/{id}/check Signed PDP verdict for a principal + requested scope (the dashboard simulator) #
POST /auth/grants/{id}/revoke Break-glass revoke (tenant owner/admin; cascade default true; audited as… #
GET /v1/governance/agent-manifests List agent manifests (CAF Phase 2 semantic RBAC) #
DELETE /v1/governance/agent-manifests/{agentId} Delete an agent manifest #
GET /v1/governance/agent-manifests/{agentId} Get an agent manifest by agent id #
PUT /v1/governance/agent-manifests/{agentId} Create or replace an agent manifest #
GET /v1/governance/agents/inventory Agent inventory — every caller seen in the window classified as registered /… #
GET /v1/governance/anomaly/history Anomaly history (last N events) #
GET /v1/governance/anomaly/scores Recent anomaly-detected security events #
GET /v1/governance/artifacts/{request_id} Signed Governance Artifact for one request — control-mapped, verifiable evidence #
GET /v1/governance/audit/chain/verify Verify the hash-chain integrity of the completion audit trail #
POST /v1/governance/audit/verify Verify server-held evidence for one request — per-check signature / registry /… #
GET /v1/governance/behavioral-profiles List behavioral profiles (CAF Phase 2) #
DELETE /v1/governance/behavioral-profiles/{role} Delete a behavioral profile by role #
PUT /v1/governance/behavioral-profiles/{role} Create or replace a behavioral profile for a role #
GET /v1/governance/completion-audit Completion audit trail (per-request identity + outcome) #
GET /v1/governance/compliance/autopilot Regulatory compliance autopilot (frameworks + score) #
GET /v1/governance/compliance/coverage Evidence coverage — fraction of recorded decisions bound to the audit chain #
GET /v1/governance/compliance/eu-ai-act Generate an EU AI Act compliance report #
POST /v1/governance/credentials/issue Issue a verifiable agent credential (VAC) #
POST /v1/governance/credentials/verify Verify a credential signature and compute trust level #
GET /v1/governance/data-policy The tenant's effective data-protection posture — retention, no-training… #
POST /v1/governance/knowledge/snapshot Create a knowledge-escrow snapshot for an agent #
GET /v1/governance/lineage Decision lineage — durable trace reconstruction (or ?live=true ring buffer) #
GET /v1/governance/lineage/{request_id} The WHY answer for one request — verified audit block + policy_context + lineage #
GET /v1/governance/memory/audit Memory change history (append/replace/delete/pin/evict) #
GET /v1/governance/memory/compliance Scan core memory for PII/policy violations #
GET /v1/governance/memory/reconstruct Reconstruct memory state at a past timestamp (with optional diff) #
GET /v1/governance/memory/stats Memory audit stats (operation counts by type) #
POST /v1/governance/policy/dry-run Evaluate a PolicyContext against the tenant ruleset (no enforcement) #
GET /v1/governance/sleep-time/report Sleep-time refinement history #
POST /v1/governance/sovereignty/policy Create a clean-room sovereignty policy between two orgs #
POST /v1/governance/sovereignty/purge Issue a provable purge of memory entries for an org #
GET /v1/governance/summary Executive dashboard summary (memory health + activity) #
GET /v1/intelligence/institutional Institutional intelligence (I3) index for the tenant #
GET /v1/intelligence/sampling-audit Routing-sampling audit (agent trap defense) #
GET /v1/security/policy-packs List the built-in policy pack library (named, versioned, framework-tagged) #
GET /v1/security/policy-packs/{id} Get one policy pack (full rules + framework mapping) #
DELETE /v1/security/processor-facts Clear the tenant's declared processor facts (self-service, API key) #
GET /v1/security/processor-facts Read back the tenant's parsed processor facts, with anything unparseable… #
POST /v1/security/processor-facts Persist the tenant's own processor facts so a constrained request can route… #
POST /v1/security/processor-facts/validate Dry-run validate processor facts before writing them to tenant settings #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/brainstormrouter-com/openapi/brainstormrouter-com-governance-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/brainstormrouter-com:brainstormrouter-com-governance-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

brainstormrouter-com-governance-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: BrainstormRouter Governance API
  version: 1.0.0
  description: 'Autonomous AI API Engine — multi-tenant gateway that intelligently routes

    AI traffic across providers with built-in memory, cost optimization, and

    autonomous background processing.


    All `/v1/*` endpoints require an API key via `Authorization: Bearer `.'
  contact:
    name: BrainstormRouter
    url: https://brainstormrouter.com
  license:
    name: Proprietary
    identifier: LicenseRef-Proprietary
servers:
- url: https://api.brainstormrouter.com
  description: Production
security:
- BearerAuth: []
tags:


# --- truncated at 32 KB (52 KB total) ---
# Full source: https://artifacts.apis.io/brainstormrouter-com/openapi/brainstormrouter-com-governance-api-openapi.yml