The alpha API provides a provider-neutral event model, normalized evidence and PII-minimized operational traces.
X-API-Key. The API fails closed when a production key is not configured.| Event | Endpoint | Use |
|---|---|---|
| onboarding | POST /api/v1/decisions/onboarding | Account opening and merchant onboarding |
| payout | POST /api/v1/decisions/payout | Withdrawals, settlement and beneficiary changes |
| account_change | POST /api/v1/decisions/account-change | Credential, contact or ownership changes |
curl -X POST https://api.gridzen.ai/api/v1/decisions/onboarding \
-H "X-API-Key: $API_KEY" \
-H "Content-Type: application/json" \
-d '{
"event": "onboarding",
"subject": {"email": "person@example.com"},
"context": {"country": "MX", "consent_reference": "consent-123"}
}'{
"trace_id": "uuid",
"decision": "review",
"risk_score": 45,
"reason_codes": ["country_context_mismatch"],
"evidence": [],
"providers_used": ["local-baseline"]
}The local-baseline provider is development-only. It does not verify a person, call a third party or establish a regulatory conclusion. Production needs tenant authorization, encrypted audit storage, retention controls and approved provider contracts.