Skip to main content
POST
Audit an OpenAPI or tool connector manifest

Authorizations

Authorization
string
header
required

Organization-scoped EvalGate API key. Discover the supported agent scopes at /.well-known/oauth-protected-resource. Per-operation grants are listed in x-evalgate-required-scopes; OpenAPI bearer security requirement arrays remain empty as required for non-OAuth schemes.

Body

application/json
connectorKey
string
required
spec
object
required
aiSystemId
number
connectorId
number
evidenceItemIds
number[]

Response

Successful response

audit
object
required
report
object
required