Skip to main content
This page separates the deployed test sandbox from the broader protocol contract. Endpoint availability is recorded in the API reference.
​
APISandbox
Live keys and live image source
  • Live: live keys read the account and the licenses it holds as licensee.
  • Published: the live verification key is in the JWKS. A published key does not mean live signing is active.
  • Built, not activated: live image checks, output submission and signed receipts. Until activation, a live POST /v1/checks or POST /v1/generations returns 403 live_not_activated, which must not be retried. Before this change, the same state returned a retryable 503.
  • An unmatched path now names the cause in detail: an ID that is not valid for the path, or a /.well-known/ route requested under /v1.
​
Sandbox
Test sandbox
Checks, inline generations, signed receipts, JSON receipt verification, fixture catalog and escalation resolution are implemented in test mode. There are no paid model calls or real talent. Run the quickstart and read the supported forms.
​
APIStandard
API version 2026-10-15

​
API version 2026-10-15

The target contract for API version 2026-10-15. The list below is the protocol scope, not a list of deployed capabilities. Planned endpoints are labeled in the reference.
  • Checks, generations and sessions with the allow, deny and escalate decisions.
  • Typed obligations, signed authorization tokens and signed receipts.
  • The ai.reflections.license C2PA assertion, and verification by receipt, manifest, digest, fingerprint or watermark.
  • Licenses, signed revisions with terms_digest, license requests and connections.
  • Revocations with acknowledgements, and the revocation feed.
  • Usage records, statements and payment records.
  • The talent side for representatives: mandates, the escalation queue, license drafts signed by a person on a hosted page, suspension, revocation, and confirming or disputing statements.
  • 33 webhook event types, signed with the Standard Webhooks scheme.
  • The session stream over WebSocket.
  • The MCP server for agents.
  • Test mode with sandbox talent and test helpers.

​
Talent License Protocol 1.0

The Standard tab publishes version 1.0 of the protocol: roles, decision semantics, token and receipt formats, the obligations registry, revocation deadlines, discovery, and mappings to RSL 1.0, the Human Consent Standard, C2PA and ODRL.