Skip to main content
POST
/
cards
/
{cardId}
/
access
Request card access (evaluates policy and returns grant/deny decision)
curl --request POST \
  --url https://api.getovra.com/cards/{cardId}/access \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "intentId": "<string>",
  "purpose": "<string>",
  "expectedAmount": 123,
  "reason": "<string>"
}
'
{
  "id": "<string>",
  "cardId": "<string>",
  "agentId": "<string>",
  "intentId": "<string>",
  "decision": "granted",
  "reasons": [
    "<string>"
  ],
  "expiresAt": "2023-11-07T05:31:56Z",
  "createdAt": "2023-11-07T05:31:56Z"
}

Authorizations

​
Authorization
string
header
required

API key (sk_...) or Agent token (at_...)

Path Parameters

​
cardId
string
required

Body

application/json
​
intentId
string
​
purpose
string
​
expectedAmount
number
​
reason
string

Response

Access granted

​
id
string
​
cardId
string
​
agentId
string
​
intentId
string | null
​
decision
enum<string>
Available options:
granted,
denied
​
reasons
string[]
​
expiresAt
string<date-time> | null
​
createdAt
string<date-time>