API reference

API: Governance

Method	Path	What it does	Scope
GET	`/v1/governance/agents`	Every agent: who answers for it, its autonomy, tools granted, data sources it's kept from, and its last 30 days (owner)	`audit:read`
GET	`/v1/governance/agents/:id/decisions`	An agent's decision history: approvals by people and policy decisions, oldest first (owner; JSON, JSONL or CSV)	`audit:read`
GET	`/v1/governance/incidents`	Incident reports: runs that failed, were cancelled or were refused by policy, each with its timeline (owner)	`audit:read`
GET	`/v1/source-access`	Each connected data source with who may see what came from it and which AI surfaces may read it (owner)	`security:write`
PUT	`/v1/source-access/:connection_id`	Limit a data source to roles and teams, and choose whether Ask, MCP clients and agents (all or named) may read it; null clears the rule (owner) (web app only)	`security:write`

Examples

GET /v1/governance/agents

Every agent: who answers for it, its autonomy, tools granted, data sources it's kept from, and its last 30 days (owner)

curl -s "https://api.closefinch.com/v1/governance/agents" \
  -H "Authorization: Bearer $RA_API_KEY"

const res = await fetch(`https://api.closefinch.com/v1/governance/agents`, {
  method: "GET",
  headers: { authorization: `Bearer ${process.env.RA_API_KEY}` },
});
const data = await res.json();

GET /v1/governance/agents/$ID/decisions

An agent's decision history: approvals by people and policy decisions, oldest first (owner; JSON, JSONL or CSV)

curl -s "https://api.closefinch.com/v1/governance/agents/$ID/decisions" \
  -H "Authorization: Bearer $RA_API_KEY"

const res = await fetch(`https://api.closefinch.com/v1/governance/agents/${id}/decisions`, {
  method: "GET",
  headers: { authorization: `Bearer ${process.env.RA_API_KEY}` },
});
const data = await res.json();

GET /v1/governance/incidents

Incident reports: runs that failed, were cancelled or were refused by policy, each with its timeline (owner)

curl -s "https://api.closefinch.com/v1/governance/incidents" \
  -H "Authorization: Bearer $RA_API_KEY"

const res = await fetch(`https://api.closefinch.com/v1/governance/incidents`, {
  method: "GET",
  headers: { authorization: `Bearer ${process.env.RA_API_KEY}` },
});
const data = await res.json();

GET /v1/source-access

Each connected data source with who may see what came from it and which AI surfaces may read it (owner)

curl -s "https://api.closefinch.com/v1/source-access" \
  -H "Authorization: Bearer $RA_API_KEY"

const res = await fetch(`https://api.closefinch.com/v1/source-access`, {
  method: "GET",
  headers: { authorization: `Bearer ${process.env.RA_API_KEY}` },
});
const data = await res.json();

Request and response schemas: https://www.closefinch.com/openapi.json. All resources: API reference.