---
title: "Cert-gated Postgres write (optional; fail-closed unless SQLGUARD_EXECUTOR_ENABLED)"
method: POST
path: "/v1/execute"
tags: ["Execution Certificate", "executor", "SQL authorize"]
---

# Cert-gated Postgres write (optional; fail-closed unless SQLGUARD_EXECUTOR_ENABLED)

`POST /v1/execute`

## Request

- Base URL: `https://sqlguard.io`
- URL: `https://sqlguard.io/v1/execute`
- Auth: none required

When enabled: verify Ed25519 PASS cert, bind sql_hash+schema_hash, consume cert_id once, execute one statement. Public host defaults OFF — empty POST returns 503 EXECUTOR_DISABLED (check GET /health). See /EXECUTOR.md.

## Request body

- object
  - `schema_ddl` string, required
  - `sql` string, required
  - `certificate` object, required
  - `signature` string, required
  - `agent_id` string

## Response `200`

Statement executed under verified cert

## Other responses

- `403`: Verify/hash failure
- `409`: Cert replay
- `503`: Executor disabled or DB not configured

---

[API](https://skmtc.dev/sqlguard/apis/sqlguard-permission-before-production-writes.md) · [All operations](https://skmtc.dev/sqlguard/apis/sqlguard-permission-before-production-writes/llms.txt) · [OpenAPI document](https://skmtc.dev/sqlguard/apis/sqlguard-permission-before-production-writes/revisions/d164204b4aea?raw)