> ## Documentation Index > Fetch the complete documentation index at: https://evalgate.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Create proof evidence > Requires scopes: eval:read ## OpenAPI ````yaml /api-reference/openapi.json post /api/proof/controls/{controlId}/evidence openapi: 3.1.2 info: title: EvalGate API version: 18.13.0 description: EvalGate API. See docs/api-contract.md for stability commitments. servers: - url: https://evalgate.com description: Production - url: http://localhost:3000 description: Local security: [] paths: /api/proof/controls/{controlId}/evidence: post: tags: - proof summary: Create proof evidence description: 'Requires scopes: eval:read' operationId: post_proof_controls_controlId_evidence parameters: - name: controlId in: path required: true schema: type: string requestBody: required: true content: application/json: schema: $ref: >- #/components/schemas/PostApiProofControlsControlIdEvidenceRequest responses: '201': description: Successful response content: application/json: schema: $ref: >- #/components/schemas/PostApiProofControlsControlIdEvidenceResponse201ApplicationJson '400': $ref: '#/components/responses/ValidationError' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '404': $ref: '#/components/responses/NotFound' '409': $ref: '#/components/responses/Conflict' '429': $ref: '#/components/responses/RateLimited' '500': $ref: '#/components/responses/InternalError' '503': $ref: '#/components/responses/ServiceUnavailable' security: - bearerAuth: [] components: schemas: PostApiProofControlsControlIdEvidenceRequest: oneOf: - type: object properties: bindingId: type: string captureKind: type: string enum: - validator_test hostileArguments: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' legitimateArguments: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' expectedControlVersion: type: number environment: oneOf: - type: string enum: - production - type: string enum: - local - type: string enum: - ci - type: string enum: - staging idempotencyKey: type: string additionalProperties: false required: - bindingId - captureKind - hostileArguments - legitimateArguments - expectedControlVersion - type: object properties: bindingId: type: string captureKind: type: string enum: - attestation hostileArguments: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' legitimateArguments: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' expectedControlVersion: type: number attestationStatement: type: string environment: oneOf: - type: string enum: - production - type: string enum: - local - type: string enum: - ci - type: string enum: - staging idempotencyKey: type: string hostileInvocationOccurred: oneOf: - type: boolean enum: - false - type: boolean enum: - true legitimateInvocationOccurred: oneOf: - type: boolean enum: - false - type: boolean enum: - true additionalProperties: false required: - bindingId - captureKind - hostileArguments - legitimateArguments - expectedControlVersion - attestationStatement - type: object properties: bindingId: type: string captureKind: type: string enum: - operation hostileArguments: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' legitimateArguments: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' expectedControlVersion: type: number hostileReceiptRef: type: string legitimateReceiptRef: type: string environment: oneOf: - type: string enum: - production - type: string enum: - local - type: string enum: - ci - type: string enum: - staging idempotencyKey: type: string additionalProperties: false required: - bindingId - captureKind - hostileArguments - legitimateArguments - expectedControlVersion - hostileReceiptRef - legitimateReceiptRef - type: object properties: evidenceItemId: type: number addressesCriterion: type: string captureKind: type: string enum: - link_existing limitations: type: string additionalProperties: false required: - evidenceItemId - addressesCriterion - captureKind PostApiProofControlsControlIdEvidenceResponse201ApplicationJson: oneOf: - type: object properties: control: type: object properties: id: type: number requirementKey: type: string title: type: string requirementText: type: string owner: oneOf: - type: 'null' - type: string version: type: number state: type: string status: type: string requirementType: type: string workspaceId: type: number aiSystemId: oneOf: - type: 'null' - type: number acceptanceCriteria: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' safeguards: type: array items: type: object properties: bindingId: type: string implementationKey: type: string configurationRevision: type: string kind: oneOf: - type: string enum: - documented_external - type: string enum: - manual_procedure - type: string enum: - permission_profile - type: string enum: - tool_argument_schema title: type: string mode: oneOf: - type: string enum: - block - type: string enum: - disabled - type: string enum: - monitor - type: string enum: - require_approval - type: string enum: - unknown - type: string enum: - warn activationState: oneOf: - type: string enum: - active_reported - type: string enum: - configured - type: string enum: - disabled - type: string enum: - mapped - type: string enum: - unknown originClass: oneOf: - type: string enum: - customer_system - type: string enum: - evalgate_platform - type: string enum: - externally_inherited scopeNote: type: string supportsCriterion: type: string limitations: type: string owner: type: string profileId: type: number profileKey: type: string policyVersion: type: string environment: type: string implementationRef: type: string procedureNote: type: string frequencyOrTrigger: type: string expectedRecords: type: string linkedAt: type: string linkedBy: type: string additionalProperties: false required: - bindingId - kind - title - mode - activationState - originClass - scopeNote - supportsCriterion - limitations - linkedAt - linkedBy evidence: type: array items: type: object properties: evidenceItemId: type: number title: type: string kind: type: string source: type: string fitness: oneOf: - type: string enum: - conflicting - type: string enum: - current - type: string enum: - excluded - type: string enum: - missing - type: string enum: - partial - type: string enum: - stale - type: string enum: - unknown checkOutcome: oneOf: - type: string enum: - failed - type: string enum: - inconclusive - type: string enum: - not_run - type: string enum: - passed eventAt: oneOf: - type: 'null' - type: string addressesCriterion: oneOf: - type: 'null' - type: string limitations: oneOf: - type: 'null' - type: string preview: oneOf: - type: 'null' - type: object additionalProperties: $ref: '#/components/schemas/JsonValue' contentHash: type: string preventionEstablished: oneOf: - type: 'null' - type: boolean enum: - false - type: boolean enum: - true claimScope: oneOf: - type: 'null' - type: string enum: - controlled_validator_test - type: string enum: - human_attestation - type: string enum: - operation_observation applicabilityToCurrentConfig: oneOf: - type: string enum: - applies - type: string enum: - stale - type: string enum: - unknown attestedBy: oneOf: - type: 'null' - type: string policyDecisionId: oneOf: - type: 'null' - type: number additionalProperties: false required: - evidenceItemId - title - kind - source - fitness - checkOutcome - eventAt - addressesCriterion - limitations - preview - contentHash - preventionEstablished - claimScope - applicabilityToCurrentConfig - attestedBy - policyDecisionId evidenceFitness: oneOf: - type: string enum: - conflicting - type: string enum: - current - type: string enum: - excluded - type: string enum: - missing - type: string enum: - partial - type: string enum: - stale - type: string enum: - unknown implementationState: oneOf: - type: string enum: - active_reported - type: string enum: - configured - type: string enum: - disabled - type: string enum: - mapped - type: string enum: - planned - type: string enum: - unknown observedUse: oneOf: - type: string enum: - not_established - type: string enum: - recorded checkOutcome: oneOf: - type: string enum: - failed - type: string enum: - inconclusive - type: string enum: - not_run - type: string enum: - passed nextAction: type: object properties: kind: oneOf: - type: string enum: - capture_evidence - type: string enum: - configure_safeguard - type: string enum: - investigate - type: string enum: - link_safeguard - type: string enum: - none - type: string enum: - prepare_review - type: string enum: - request_evidence - type: string enum: - respond_to_request label: type: string reason: type: string additionalProperties: false required: - kind - label - reason gaps: type: array items: type: string planHash: type: string updatedAt: type: string additionalProperties: false required: - id - requirementKey - title - requirementText - owner - version - state - status - requirementType - workspaceId - aiSystemId - acceptanceCriteria - safeguards - evidence - evidenceFitness - implementationState - observedUse - checkOutcome - nextAction - gaps - planHash - updatedAt receipt: type: object properties: planHash: type: string additionalProperties: false required: - planHash additionalProperties: false required: - control - receipt - type: object properties: control: type: object properties: id: type: number requirementKey: type: string title: type: string requirementText: type: string owner: oneOf: - type: 'null' - type: string version: type: number state: type: string status: type: string requirementType: type: string workspaceId: type: number aiSystemId: oneOf: - type: 'null' - type: number acceptanceCriteria: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' safeguards: type: array items: type: object properties: bindingId: type: string implementationKey: type: string configurationRevision: type: string kind: oneOf: - type: string enum: - documented_external - type: string enum: - manual_procedure - type: string enum: - permission_profile - type: string enum: - tool_argument_schema title: type: string mode: oneOf: - type: string enum: - block - type: string enum: - disabled - type: string enum: - monitor - type: string enum: - require_approval - type: string enum: - unknown - type: string enum: - warn activationState: oneOf: - type: string enum: - active_reported - type: string enum: - configured - type: string enum: - disabled - type: string enum: - mapped - type: string enum: - unknown originClass: oneOf: - type: string enum: - customer_system - type: string enum: - evalgate_platform - type: string enum: - externally_inherited scopeNote: type: string supportsCriterion: type: string limitations: type: string owner: type: string profileId: type: number profileKey: type: string policyVersion: type: string environment: type: string implementationRef: type: string procedureNote: type: string frequencyOrTrigger: type: string expectedRecords: type: string linkedAt: type: string linkedBy: type: string additionalProperties: false required: - bindingId - kind - title - mode - activationState - originClass - scopeNote - supportsCriterion - limitations - linkedAt - linkedBy evidence: type: array items: type: object properties: evidenceItemId: type: number title: type: string kind: type: string source: type: string fitness: oneOf: - type: string enum: - conflicting - type: string enum: - current - type: string enum: - excluded - type: string enum: - missing - type: string enum: - partial - type: string enum: - stale - type: string enum: - unknown checkOutcome: oneOf: - type: string enum: - failed - type: string enum: - inconclusive - type: string enum: - not_run - type: string enum: - passed eventAt: oneOf: - type: 'null' - type: string addressesCriterion: oneOf: - type: 'null' - type: string limitations: oneOf: - type: 'null' - type: string preview: oneOf: - type: 'null' - type: object additionalProperties: $ref: '#/components/schemas/JsonValue' contentHash: type: string preventionEstablished: oneOf: - type: 'null' - type: boolean enum: - false - type: boolean enum: - true claimScope: oneOf: - type: 'null' - type: string enum: - controlled_validator_test - type: string enum: - human_attestation - type: string enum: - operation_observation applicabilityToCurrentConfig: oneOf: - type: string enum: - applies - type: string enum: - stale - type: string enum: - unknown attestedBy: oneOf: - type: 'null' - type: string policyDecisionId: oneOf: - type: 'null' - type: number additionalProperties: false required: - evidenceItemId - title - kind - source - fitness - checkOutcome - eventAt - addressesCriterion - limitations - preview - contentHash - preventionEstablished - claimScope - applicabilityToCurrentConfig - attestedBy - policyDecisionId evidenceFitness: oneOf: - type: string enum: - conflicting - type: string enum: - current - type: string enum: - excluded - type: string enum: - missing - type: string enum: - partial - type: string enum: - stale - type: string enum: - unknown implementationState: oneOf: - type: string enum: - active_reported - type: string enum: - configured - type: string enum: - disabled - type: string enum: - mapped - type: string enum: - planned - type: string enum: - unknown observedUse: oneOf: - type: string enum: - not_established - type: string enum: - recorded checkOutcome: oneOf: - type: string enum: - failed - type: string enum: - inconclusive - type: string enum: - not_run - type: string enum: - passed nextAction: type: object properties: kind: oneOf: - type: string enum: - capture_evidence - type: string enum: - configure_safeguard - type: string enum: - investigate - type: string enum: - link_safeguard - type: string enum: - none - type: string enum: - prepare_review - type: string enum: - request_evidence - type: string enum: - respond_to_request label: type: string reason: type: string additionalProperties: false required: - kind - label - reason gaps: type: array items: type: string planHash: type: string updatedAt: type: string additionalProperties: false required: - id - requirementKey - title - requirementText - owner - version - state - status - requirementType - workspaceId - aiSystemId - acceptanceCriteria - safeguards - evidence - evidenceFitness - implementationState - observedUse - checkOutcome - nextAction - gaps - planHash - updatedAt result: type: object properties: claimScope: oneOf: - type: string enum: - controlled_validator_test - type: string enum: - human_attestation - type: string enum: - operation_observation mode: oneOf: - type: string enum: - block - type: string enum: - disabled - type: string enum: - monitor - type: string enum: - require_approval - type: string enum: - unknown - type: string enum: - warn requiredFields: type: array items: type: string aggregateOutcome: oneOf: - type: string enum: - failed - type: string enum: - inconclusive - type: string enum: - not_run - type: string enum: - passed validatorHash: type: string receiptResolution: oneOf: - type: string enum: - not_applicable - type: string enum: - resolved - type: string enum: - unresolved receipts: type: object properties: hostile: type: object properties: status: oneOf: - type: string enum: - conflict - type: string enum: - invalid - type: string enum: - resolved - type: string enum: - unresolved summary: type: string reason: type: string invocationOccurred: oneOf: - type: 'null' - type: boolean enum: - false - type: boolean enum: - true permissionDecision: oneOf: - type: string enum: - allow - type: string enum: - deny - type: string enum: - unknown additionalProperties: false required: - status - summary - reason - invocationOccurred - permissionDecision legitimate: type: object properties: status: oneOf: - type: string enum: - conflict - type: string enum: - invalid - type: string enum: - resolved - type: string enum: - unresolved summary: type: string reason: type: string invocationOccurred: oneOf: - type: 'null' - type: boolean enum: - false - type: boolean enum: - true permissionDecision: oneOf: - type: string enum: - allow - type: string enum: - deny - type: string enum: - unknown additionalProperties: false required: - status - summary - reason - invocationOccurred - permissionDecision prevention: type: string additionalProperties: false required: - hostile - legitimate - prevention hostile: type: object properties: caseKind: oneOf: - type: string enum: - hostile - type: string enum: - legitimate missingFields: type: array items: type: string schemaDecision: oneOf: - type: string enum: - accept - type: string enum: - reject invocationOccurred: oneOf: - type: 'null' - type: boolean enum: - false - type: boolean enum: - true preventionEstablished: oneOf: - type: 'null' - type: boolean enum: - false - type: boolean enum: - true outcome: oneOf: - type: string enum: - failed - type: string enum: - inconclusive - type: string enum: - not_run - type: string enum: - passed reasons: type: array items: type: string argumentsPreview: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' argumentsRedacted: type: boolean argumentsTruncated: type: boolean argumentsHash: type: string additionalProperties: false required: - caseKind - missingFields - schemaDecision - invocationOccurred - preventionEstablished - outcome - reasons - argumentsPreview - argumentsRedacted - argumentsTruncated - argumentsHash legitimate: type: object properties: caseKind: oneOf: - type: string enum: - hostile - type: string enum: - legitimate missingFields: type: array items: type: string schemaDecision: oneOf: - type: string enum: - accept - type: string enum: - reject invocationOccurred: oneOf: - type: 'null' - type: boolean enum: - false - type: boolean enum: - true preventionEstablished: oneOf: - type: 'null' - type: boolean enum: - false - type: boolean enum: - true outcome: oneOf: - type: string enum: - failed - type: string enum: - inconclusive - type: string enum: - not_run - type: string enum: - passed reasons: type: array items: type: string argumentsPreview: type: object additionalProperties: $ref: '#/components/schemas/JsonValue' argumentsRedacted: type: boolean argumentsTruncated: type: boolean argumentsHash: type: string additionalProperties: false required: - caseKind - missingFields - schemaDecision - invocationOccurred - preventionEstablished - outcome - reasons - argumentsPreview - argumentsRedacted - argumentsTruncated - argumentsHash additionalProperties: false required: - claimScope - mode - requiredFields - aggregateOutcome - validatorHash - receiptResolution - hostile - legitimate receipt: type: object properties: planHash: type: string evidenceItemIds: type: array items: type: number policyDecisionIds: type: array items: type: number claimScope: oneOf: - type: string enum: - controlled_validator_test - type: string enum: - human_attestation - type: string enum: - operation_observation idempotencyKey: type: string replayed: type: boolean bindingId: type: string configurationRevision: oneOf: - type: 'null' - type: string controlVersionAtCapture: type: number receiptResolution: oneOf: - type: string enum: - not_applicable - type: string enum: - resolved - type: string enum: - unresolved additionalProperties: false required: - planHash - evidenceItemIds - policyDecisionIds - claimScope - idempotencyKey - replayed - bindingId - configurationRevision - controlVersionAtCapture - receiptResolution additionalProperties: false required: - control - result - receipt JsonValue: oneOf: - type: 'null' - type: boolean - type: number - type: string - type: array items: $ref: '#/components/schemas/JsonValue' - type: object additionalProperties: $ref: '#/components/schemas/JsonValue' ApiError: type: object properties: error: type: object properties: code: type: string enum: - UNAUTHORIZED - FORBIDDEN - NOT_FOUND - INVALID_REFERENCE - VALIDATION_ERROR - RATE_LIMITED - CONFLICT - INTERNAL_ERROR - SERVICE_UNAVAILABLE - QUOTA_EXCEEDED - FEATURE_LIMIT_REACHED - NO_ORG_MEMBERSHIP - SHARE_REVOKED - SHARE_EXPIRED - SHARE_UNAVAILABLE - PROVIDER_KEY_MISSING - PROVIDER_KEY_EXPIRED - PROVIDER_RATE_LIMITED - PROVIDER_UNAUTHORIZED - PROVIDER_UNAVAILABLE - AGENT_HANDOFF_INVALID - AGENT_HANDOFF_EXPIRED - AGENT_HANDOFF_DENIED - AGENT_HANDOFF_CONSUMED - PAYLOAD_TOO_LARGE - METHOD_NOT_ALLOWED message: type: string details: {} requestId: type: string format: uuid redaction: type: object properties: applied: type: boolean enum: - true fieldCount: type: integer minimum: 0 secretCount: type: integer minimum: 0 required: - applied - fieldCount - secretCount required: - code - message required: - error responses: ValidationError: description: Validation error content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string Unauthorized: description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string WWW-Authenticate: description: >- Bearer challenge. Agent-facing routes include the RFC 9728 resource_metadata URL. schema: type: string Forbidden: description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string NotFound: description: Resource not found content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string Conflict: description: Conflict content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string RateLimited: description: Rate limit exceeded content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string Retry-After: description: Delay in seconds before retrying when present. schema: type: integer minimum: 1 InternalError: description: Internal server error content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string ServiceUnavailable: description: Service unavailable content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: RateLimit-Limit: description: Quota in requests for the active window. schema: type: integer minimum: 0 RateLimit-Remaining: description: Remaining requests in the active window. schema: type: integer minimum: 0 RateLimit-Reset: description: Reset delay in seconds (not a Unix timestamp). schema: type: integer minimum: 1 X-RateLimit-Limit: schema: type: integer minimum: 0 X-RateLimit-Remaining: schema: type: integer minimum: 0 X-RateLimit-Reset: description: Legacy reset timestamp in Unix milliseconds. schema: type: integer minimum: 0 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: EvalGate API key description: >- Organization-scoped EvalGate API key. Discover the supported agent scopes at /.well-known/oauth-protected-resource. Per-operation grants are listed in x-evalgate-required-scopes; OpenAPI bearer security requirement arrays remain empty as required for non-OAuth schemes. x-evalgate-scopes-supported: - eval:read - eval:write - objectives:read - objectives:write - runs:read - runs:write - traces:read - traces:write - exports:download - reports:write - prompt:publish - scorer:publish - red_team:read - red_team:run - red_team:approve - docs:read - agent:read - agent:execute - resources:read - resources:write - contexts:read - contexts:write - observations:write - checks:read - checks:run - standards:read - standards:write - standards:approve - grants:read - grants:write - admin:keys - admin:workspace - admin:org x-evalgate-protected-resource-metadata: https://www.evalgate.com/.well-known/oauth-protected-resource ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.