Forward a request, inspecting it on the way

The same inspection as /inspect with no code to write: point an HTTP client here and every request it makes is checked before it leaves.

The destination follows the prefix as a full URL, or is sent as X-Secure-AI-Target. The vendor's own credential goes in X-Secure-AI-Forward-Authorization — the Authorization header is ours and is never forwarded.

Refuses private and link-local destinations, so it cannot be used to reach a cloud metadata service. Bodies it cannot read as text are forwarded and the response carries X-Secure-AI-Inspected: false.

post/gateway/{destination}

Request

  • Base URL: https://secureai.one/v1
  • URL: https://secureai.one/v1/gateway/{destination}
  • Auth: HTTP bearer

Path parameters

destinationstring required

The full destination URL, e.g. https://api.vendor.com/v1/send

Headers

X-Secure-AI-Forward-Authorizationstring

Sent onward as the destination's Authorization header.

X-Secure-AI-Agentstring

Groups this request's record with the rest of that agent's.

Response

The destination's own response, passed back. X-Secure-AI-Decision says whether anything was changed; X-Secure-AI-Audit-Id identifies the record.

Changes

No recorded changes to this operation across all 1 revision of this API.