Gate

OpenAPI contract

Updated 4 October 2026

The Gate API is published as an OpenAPI 3.1 document, generated from the same code that answers requests, so it never drifts from the service:

openapi.json


Server	`https://api.tyoaly.com`
Security	HTTP bearer, the environment's API key
`POST /v1/gate/evaluate`	one decision; bodies `application/json` (a version-1 request, or any JSON with Intake), `text/plain` and other text types, `text/html`, `message/rfc822`
`GET /v1/decisions/{decision_id}`	the record, with `review` once a verdict exists
`POST /v1/decisions/{decision_id}/review`	the verdict: `approved`, `denied` or `changed`
`GET /v1/health`	liveness

Everything under /v1 only gains fields: a client generated today keeps working. The document is regenerated with every release and the changelog records contract changes.

Use it with any OpenAPI tool: import it into your API client, generate a typed client, or validate requests in your test suite. The human-readable API reference explains each field.

Something missing or unclear on this page? Write to hei@tyoaly.fi.