API Reference

Integrate AI governance checks into your CI/CD pipeline, scripts, and automation workflows.

v1.0

Base URL: https://api.governallai.com

Pricing

API and CLI access is available on Professional, Business, and Enterprise plans. The health check endpoint is always free. All other endpoints are metered.

Rate Schedule

Operation	Endpoints	Cost per call
Read	GET /systems, /assessments, /audit-logs	$0.15
Write	POST/PUT/DELETE /systems	$0.35
Assessment	POST /assessments	$5.00
Document Gen	POST /documents/generate	$10.00
Health	GET /health	Free

Tier Credits

Professional ($49/mo)

$25

included monthly credit

Business ($149/mo)

$75

included monthly credit

Enterprise ($299/mo)

$200

included monthly credit

Overage beyond included credit is billed at the rates above. No hard cap; usage continues at metered rates. Free / unpaid accounts do not include API/CLI access — Professional plan or higher is required.

Authentication

All API v1 endpoints require authentication via an API key. Create keys in your organization settings.

Using your API key

Pass your API key in the Authorization header:

Authorization: Bearer agov_a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6

Key Format

agov_ prefix + 32 hex characters (128 bits entropy)

Key Security

Keys are shown once at creation. We store only the SHA-256 hash; we cannot recover a lost key.

Key Roles

Each key has an assigned role (viewer, analyst, auditor, admin) that determines permissions.

Environment Variable

Store as AGOV_API_KEY in your CI/CD environment. Never commit to git.

Rate Limiting

Each API key has a configurable rate limit (default: 60 requests/minute). Rate limit info is included in every response via standard headers.

Response Headers

X-RateLimit-Limit	Maximum requests per 60-second window
X-RateLimit-Remaining	Requests remaining in current window
X-RateLimit-Reset	Seconds until the window resets
Retry-After	Seconds to wait (only present on 429 responses)

When rate limited, the API returns 429 Too Many Requests. Wait the number of seconds in the Retry-After header before retrying.

Health

Verify API availability and version.

AI Systems

Manage your organization's AI system inventory. Systems are the foundation of governance assessments.

Assessments

Run governance assessments on your AI system inventory and retrieve results.

Documents

Generate governance documents based on assessment results.

Audit Logs

Access the organization's audit trail for compliance evidence.

Error Codes

Code	Meaning	Description
400	Bad Request	Invalid input data. Check the request body or query parameters.
401	Unauthorized	Missing, invalid, expired, or revoked API key.
403	Forbidden	API key role lacks permission for this action.
404	Not Found	Resource does not exist or is not accessible.
429	Too Many Requests	Per-key rate limit exceeded. Check X-RateLimit-* headers.
500	Internal Error	Server error. Contact support if persistent.

Error Response Format

{
  "detail": "Error message describing what went wrong"
}

Role Permissions

Each API key is assigned a role that determines which endpoints it can access.

Role	View	Create	Edit	Delete	Assess	Docs	Audit
Viewer	Yes	N/A	N/A	N/A	N/A	N/A	N/A
Auditor	Yes	N/A	N/A	N/A	N/A	N/A	Yes
Analyst	Yes	Yes	Yes	N/A	Yes	Yes	N/A
Admin	Yes	Yes	Yes	Yes	Yes	Yes	Yes

Response Envelope

All v1 endpoints return responses in a consistent envelope format with data and meta fields.

{
  "data": "... response payload ...",
  "meta": {
    "version": "1.0",
    "timestamp": "2026-02-16T12:00:00Z",
    "request_id": "abc-123-def-456",
    "rate_limit": {
      "limit": 60,
      "remaining": 58
    },
    "page": 1,
    "per_page": 20,
    "total": 150,
    "has_more": true
  }
}

CLI (agov)

The agov CLI wraps the REST API for terminal and CI/CD usage. Requires a Professional, Business, or Enterprise plan.

Install

pip install git+https://gitlab.globalvibing.com/govern-all-ai/govern-all-ai.git#subdirectory=cli

Configuration

AGOV_API_KEY: Your API key (or pass --api-key)

AGOV_API_URL: API base URL, defaults to https://api.governallai.com

Commands

agov status

Check API health and validate your key.

$ agov status
API Status: healthy
API Key: Valid
Systems: 12 registered

agov systems list | create | delete

Manage your AI system inventory.

# List systems
$ agov systems list

# Register a system
$ agov systems create --name "Resume Screener" \
    --ai-type classification --use-case hr \
    --data-types personal,behavioral

# Delete a system
$ agov systems delete SYSTEM_UUID

agov assess

Run governance assessment. Use --fail-on in CI/CD to exit non-zero when risk meets or exceeds a threshold.

# Assess all systems
$ agov assess
Overall Risk: [HIGH]
EU Compliance: 70%
NIST Compliance: 65%

# Fail pipeline on high risk or above
$ agov assess --fail-on high

agov docs

Generate governance documents (risk-assessment, ai-use-policy, model-card, data-governance, incident-response).

$ agov docs risk-assessment -o report.md
Generating risk-assessment document...
Saved to: report.md

Exit Codes

Code	Meaning
0	Pass: all systems within acceptable risk
1	High risk: at least one system classified high
2	Critical: at least one system classified prohibited
3	Error: bad config, network failure, invalid key

← Back to Home

API Reference

Integrate AI governance checks into your CI/CD pipeline, scripts, and automation workflows.

v1.0

Base URL: https://api.governallai.com

Pricing

API and CLI access is available on Professional, Business, and Enterprise plans. The health check endpoint is always free. All other endpoints are metered.

Rate Schedule

Operation	Endpoints	Cost per call
Read	GET /systems, /assessments, /audit-logs	$0.15
Write	POST/PUT/DELETE /systems	$0.35
Assessment	POST /assessments	$5.00
Document Gen	POST /documents/generate	$10.00
Health	GET /health	Free

Tier Credits

Professional ($49/mo)

$25

included monthly credit

Business ($149/mo)

$75

included monthly credit

Enterprise ($299/mo)

$200

included monthly credit

Authentication

All API v1 endpoints require authentication via an API key. Create keys in your organization settings.

Using your API key

Pass your API key in the Authorization header:

Authorization: Bearer agov_a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6

Key Format

agov_ prefix + 32 hex characters (128 bits entropy)

Key Security

Keys are shown once at creation. We store only the SHA-256 hash; we cannot recover a lost key.

Key Roles

Each key has an assigned role (viewer, analyst, auditor, admin) that determines permissions.

Environment Variable

Store as AGOV_API_KEY in your CI/CD environment. Never commit to git.

Rate Limiting

Each API key has a configurable rate limit (default: 60 requests/minute). Rate limit info is included in every response via standard headers.

Response Headers

X-RateLimit-Limit	Maximum requests per 60-second window
X-RateLimit-Remaining	Requests remaining in current window
X-RateLimit-Reset	Seconds until the window resets
Retry-After	Seconds to wait (only present on 429 responses)

When rate limited, the API returns 429 Too Many Requests. Wait the number of seconds in the Retry-After header before retrying.

Health

Verify API availability and version.

AI Systems

Manage your organization's AI system inventory. Systems are the foundation of governance assessments.

Assessments

Run governance assessments on your AI system inventory and retrieve results.

Documents

Generate governance documents based on assessment results.

Audit Logs

Access the organization's audit trail for compliance evidence.

Error Codes

Code	Meaning	Description
400	Bad Request	Invalid input data. Check the request body or query parameters.
401	Unauthorized	Missing, invalid, expired, or revoked API key.
403	Forbidden	API key role lacks permission for this action.
404	Not Found	Resource does not exist or is not accessible.
429	Too Many Requests	Per-key rate limit exceeded. Check X-RateLimit-* headers.
500	Internal Error	Server error. Contact support if persistent.

Error Response Format

{
  "detail": "Error message describing what went wrong"
}

Role Permissions

Each API key is assigned a role that determines which endpoints it can access.

Role	View	Create	Edit	Delete	Assess	Docs	Audit
Viewer	Yes	N/A	N/A	N/A	N/A	N/A	N/A
Auditor	Yes	N/A	N/A	N/A	N/A	N/A	Yes
Analyst	Yes	Yes	Yes	N/A	Yes	Yes	N/A
Admin	Yes	Yes	Yes	Yes	Yes	Yes	Yes

Response Envelope

All v1 endpoints return responses in a consistent envelope format with data and meta fields.

{
  "data": "... response payload ...",
  "meta": {
    "version": "1.0",
    "timestamp": "2026-02-16T12:00:00Z",
    "request_id": "abc-123-def-456",
    "rate_limit": {
      "limit": 60,
      "remaining": 58
    },
    "page": 1,
    "per_page": 20,
    "total": 150,
    "has_more": true
  }
}

CLI (agov)

The agov CLI wraps the REST API for terminal and CI/CD usage. Requires a Professional, Business, or Enterprise plan.

Install

pip install git+https://gitlab.globalvibing.com/govern-all-ai/govern-all-ai.git#subdirectory=cli

Configuration

AGOV_API_KEY: Your API key (or pass --api-key)

AGOV_API_URL: API base URL, defaults to https://api.governallai.com

Commands

agov status

Check API health and validate your key.

$ agov status
API Status: healthy
API Key: Valid
Systems: 12 registered

agov systems list | create | delete

Manage your AI system inventory.

# List systems
$ agov systems list

# Register a system
$ agov systems create --name "Resume Screener" \
    --ai-type classification --use-case hr \
    --data-types personal,behavioral

# Delete a system
$ agov systems delete SYSTEM_UUID

agov assess

Run governance assessment. Use --fail-on in CI/CD to exit non-zero when risk meets or exceeds a threshold.

# Assess all systems
$ agov assess
Overall Risk: [HIGH]
EU Compliance: 70%
NIST Compliance: 65%

# Fail pipeline on high risk or above
$ agov assess --fail-on high

agov docs

Generate governance documents (risk-assessment, ai-use-policy, model-card, data-governance, incident-response).

$ agov docs risk-assessment -o report.md
Generating risk-assessment document...
Saved to: report.md

Exit Codes

Code	Meaning
0	Pass: all systems within acceptable risk
1	High risk: at least one system classified high
2	Critical: at least one system classified prohibited
3	Error: bad config, network failure, invalid key