API Reference

The Anchor API is organized around REST. Our API has predictable resource-oriented URLs, accepts JSON-encoded request bodies, returns JSON-encoded responses, and uses standard HTTP response codes, authentication, and verbs.

Base URL: https://api.getanchor.dev

Authentication

All API requests require authentication via the X-API-Key header:

X-API-Key: your-api-key-here

Core Resources

The Anchor API is organized around 5 core namespaces:

Agents

Agent registry and lifecycle management. Create, get, list, update, delete, suspend, and activate agents.

View endpoints →
Config

Versioned agent configuration. Get, update, list versions, get version, and rollback configurations.

View endpoints →
Data

Governed key-value data storage with policy enforcement. Write, read, delete, list, and search data.

View endpoints →
Checkpoints

State snapshots and rollback. Create, list, get, restore, and delete checkpoints.

View endpoints →
Audit

Hash-chained audit trail. Query, get, verify, and export audit logs.

View endpoints →

SDK Coverage

✅ Available in SDK (v1.0):

  • Data operations (write, retrieve, list, get, update, delete)
  • Identity management (create, get, list, update, delete, versions, rollback)
  • Snapshots & rollback (with identity-scoped support)
  • Usage/Token tracking (statistics and listing)
  • Decision logging
  • Export operations
  • Audit ledger
  • QA metrics

⚠️ Available via Direct API Only (Coming in v1.1+):

  • Compliance API (/compliance/*) - GDPR/CCPA/AI Act report generation
  • Knowledge Graph API (/knowledge/*) - Schema management, entity extraction, graph queries

Rate Limits

API requests are rate-limited per workspace:

  • Default: 1000 requests per minute
  • Burst: Up to 100 requests per second

Rate limit headers are included in responses:

  • X-RateLimit-Limit: Maximum requests per window
  • X-RateLimit-Remaining: Remaining requests in current window
  • X-RateLimit-Reset: Unix timestamp when the limit resets

Next Steps