> ## Documentation Index > Fetch the complete documentation index at: https://evalgate.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Evaluate an agent evidence policy gate > Requires scopes: traces:write ## OpenAPI ````yaml /api-reference/openapi.json post /api/agent-evidence/policy/evaluate openapi: 3.1.2 info: title: EvalGate API version: 18.7.0 description: EvalGate API. See docs/api-contract.md for stability commitments. servers: - url: https://evalgate.com description: Production - url: http://localhost:3000 description: Local security: [] paths: /api/agent-evidence/policy/evaluate: post: tags: - agent evidence summary: Evaluate an agent evidence policy gate description: 'Requires scopes: traces:write' operationId: post_agent_evidence_policy_evaluate requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/PostApiAgentEvidencePolicyEvaluateRequest' responses: '201': description: Successful response content: application/json: schema: $ref: >- #/components/schemas/PostApiAgentEvidencePolicyEvaluateResponse201ApplicationJson '400': $ref: '#/components/responses/ValidationError' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '404': $ref: '#/components/responses/NotFound' '409': $ref: '#/components/responses/Conflict' '429': $ref: '#/components/responses/RateLimited' '500': $ref: '#/components/responses/InternalError' '503': $ref: '#/components/responses/ServiceUnavailable' security: - bearerAuth: [] components: schemas: PostApiAgentEvidencePolicyEvaluateRequest: type: object properties: action: type: string profileKey: type: string sideEffectClass: oneOf: - type: string enum: - unknown - type: string enum: - draft - type: string enum: - none - type: string enum: - read - type: string enum: - write - type: string enum: - delete - type: string enum: - classify - type: string enum: - recommend - type: string enum: - update_record - type: string enum: - external_send - type: string enum: - code_change - type: string enum: - deployment_change - type: string enum: - permission_change - type: string enum: - money_movement - type: string enum: - legal_commitment - type: string enum: - customer_contact - type: string enum: - safety_critical_action - type: string enum: - clinical_or_safety_relevant_action environment: type: string manifestHash: oneOf: - type: 'null' - type: string runtimeKey: type: string connectorKey: type: string approvalId: type: number runtimeRiskTier: oneOf: - type: string enum: - medium - type: string enum: - high - type: string enum: - critical - type: string enum: - low connectorRiskTier: oneOf: - type: string enum: - medium - type: string enum: - high - type: string enum: - critical - type: string enum: - low expectedManifestHash: oneOf: - type: 'null' - type: string evaluatorActivation: type: object properties: action: oneOf: - type: string enum: - release_gate - type: string enum: - advisory - type: string enum: - review_routing - type: string enum: - auto_adjudication schemaVersion: type: number enum: - 1 budget: type: object properties: maxCostUsd: type: number maxCalls: type: number maxRuntimeMs: type: number maxInputBytes: type: number additionalProperties: false required: - maxCostUsd - maxCalls - maxRuntimeMs - maxInputBytes expiresAt: type: string owner: type: string rollback: type: object properties: onFailure: type: boolean onDependencyDrift: type: boolean enum: - true additionalProperties: false required: - onFailure - onDependencyDrift target: type: object properties: provider: type: string policyHash: type: string evaluatorReleaseId: type: string measurementRevisionId: type: string model: type: string taskId: type: string sliceId: type: string targetScopeHash: type: string evaluatorIdentityHash: type: string experimentDigest: type: string dataScopeHash: type: string additionalProperties: false required: - provider - policyHash - evaluatorReleaseId - measurementRevisionId - model - taskId - sliceId - targetScopeHash - evaluatorIdentityHash - experimentDigest - dataScopeHash audit: type: object properties: kind: oneOf: - type: string enum: - adversarial - type: string enum: - representative minimumPassSampleRate: type: number retainInclusionProbabilities: type: boolean enum: - true additionalProperties: false required: - kind - minimumPassSampleRate - retainInclusionProbabilities fallback: oneOf: - type: string enum: - human_review - type: string enum: - deny - type: string enum: - advisory monitor: type: object properties: monitorId: type: number configurationHash: type: string additionalProperties: false required: - monitorId - configurationHash requireKnownCost: oneOf: - type: boolean enum: - false - type: boolean enum: - true additionalProperties: false required: - action - schemaVersion - budget - expiresAt - owner - rollback - target - audit - fallback links: type: object properties: aiSystemId: type: number runtimeId: type: number connectorId: type: number toolInvocationEvidenceId: type: number sideEffectLedgerId: type: number additionalProperties: false additionalProperties: false required: - action - profileKey - sideEffectClass PostApiAgentEvidencePolicyEvaluateResponse201ApplicationJson: type: object properties: result: type: object properties: decision: oneOf: - type: string enum: - unknown - type: string enum: - requires_approval - type: string enum: - denied - type: string enum: - allowed severity: oneOf: - type: string enum: - medium - type: string enum: - high - type: string enum: - critical - type: string enum: - low requiresHumanApproval: type: boolean blockDeployment: type: boolean reasons: type: array items: type: string policyVersion: type: string inputHash: type: string additionalProperties: false required: - decision - severity - requiresHumanApproval - blockDeployment - reasons - policyVersion - inputHash decision: type: object properties: id: type: number createdAt: type: string format: date-time organizationId: $ref: '#/components/schemas/OrganizationId' reasonCode: oneOf: - type: 'null' - type: string severity: type: string decision: type: string metadata: allOf: - type: object properties: schemaVersion: type: number additionalProperties: false - type: object additionalProperties: $ref: '#/components/schemas/JsonValue' aiSystemId: oneOf: - type: 'null' - type: number question: type: string permissionProfileId: oneOf: - type: 'null' - type: number policyVersion: type: string runtimeId: oneOf: - type: 'null' - type: number runtimeVersionId: oneOf: - type: 'null' - type: number connectorId: oneOf: - type: 'null' - type: number connectorManifestSnapshotId: oneOf: - type: 'null' - type: number input: allOf: - type: object properties: schemaVersion: type: number question: type: string context: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' additionalProperties: false - type: object additionalProperties: $ref: '#/components/schemas/JsonValue' inputHash: oneOf: - type: 'null' - type: string rawEventId: oneOf: - type: 'null' - type: number toolInvocationEvidenceId: oneOf: - type: 'null' - type: number sideEffectLedgerId: oneOf: - type: 'null' - type: number decisionKey: oneOf: - type: 'null' - type: string reason: oneOf: - type: 'null' - type: string evidenceItemIds: type: array items: type: number decidedAt: type: string format: date-time additionalProperties: false required: - id - createdAt - organizationId - reasonCode - severity - decision - metadata - aiSystemId - question - permissionProfileId - policyVersion - runtimeId - runtimeVersionId - connectorId - connectorManifestSnapshotId - input - inputHash - rawEventId - toolInvocationEvidenceId - sideEffectLedgerId - decisionKey - reason - evidenceItemIds - decidedAt additionalProperties: false required: - result - decision OrganizationId: type: string format: uuid JsonValue: oneOf: - type: 'null' - type: boolean - type: number - type: string - type: array items: $ref: '#/components/schemas/JsonValue' - type: object additionalProperties: $ref: '#/components/schemas/JsonValue' ApiError: type: object properties: error: type: object properties: code: type: string enum: - UNAUTHORIZED - FORBIDDEN - NOT_FOUND - INVALID_REFERENCE - VALIDATION_ERROR - RATE_LIMITED - CONFLICT - INTERNAL_ERROR - SERVICE_UNAVAILABLE - QUOTA_EXCEEDED - FEATURE_LIMIT_REACHED - NO_ORG_MEMBERSHIP - SHARE_REVOKED - SHARE_EXPIRED - SHARE_UNAVAILABLE - PROVIDER_KEY_MISSING - PROVIDER_KEY_EXPIRED - PROVIDER_RATE_LIMITED - PROVIDER_UNAUTHORIZED - PROVIDER_UNAVAILABLE - AGENT_HANDOFF_INVALID - AGENT_HANDOFF_EXPIRED - AGENT_HANDOFF_DENIED - AGENT_HANDOFF_CONSUMED - PAYLOAD_TOO_LARGE - METHOD_NOT_ALLOWED message: type: string details: {} requestId: type: string format: uuid redaction: type: object properties: applied: type: boolean enum: - true fieldCount: type: integer minimum: 0 secretCount: type: integer minimum: 0 required: - applied - fieldCount - secretCount required: - code - message required: - error responses: ValidationError: description: Validation error content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string Unauthorized: description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string WWW-Authenticate: description: >- Bearer challenge. Agent-facing routes include the RFC 9728 resource_metadata URL. schema: type: string Forbidden: description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string NotFound: description: Resource not found content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string Conflict: description: Conflict content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string RateLimited: description: Rate limit exceeded content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string Retry-After: description: Delay in seconds before retrying when present. schema: type: integer minimum: 1 InternalError: description: Internal server error content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string ServiceUnavailable: description: Service unavailable content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: EvalGate API key description: >- Organization-scoped EvalGate API key. Discover the supported agent scopes at /.well-known/oauth-protected-resource. Per-operation grants are listed in x-evalgate-required-scopes; OpenAPI bearer security requirement arrays remain empty as required for non-OAuth schemes. x-evalgate-scopes-supported: - eval:read - eval:write - objectives:read - objectives:write - runs:read - runs:write - traces:read - traces:write - exports:download - reports:write - prompt:publish - scorer:publish - red_team:read - red_team:run - red_team:approve - docs:read - agent:read - agent:execute - resources:read - resources:write - contexts:read - contexts:write - observations:write - checks:read - checks:run - standards:read - standards:write - standards:approve - grants:read - grants:write - admin:keys - admin:workspace - admin:org x-evalgate-protected-resource-metadata: https://www.evalgate.com/.well-known/oauth-protected-resource ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.