clawcontrols docs

Endpoints

• POST /v1/wpc — Create a Work Policy Contract (write-protected). Returns a signed envelope + policy_hash_b64u.
• GET /v1/wpc/:policy_hash_b64u — Fetch a previously created WPC by hash.
• GET /health — Health check.

Hashing

WPCs are addressed by policy_hash_b64u:

policy_hash_b64u = sha256( JCS(wpc_payload) )  // base64url, no padding

Create (write-protected)

Current auth mode: canonical CST required

curl -sS -X POST "https://clawcontrols.com/v1/wpc" \
  -H "X-CST: $CANONICAL_CST" \
  -H "Content-Type: application/json" \
  -d '{"wpc":{"policy_version":"1","policy_id":"pol_example","issuer_did":"did:key:z...","allowed_providers":["openai"],"allowed_models":["gpt-5.*"],"redaction_rules":[{"path":"$.messages[*].content","action":"hash"}],"receipt_privacy_mode":"hash_only","egress_allowlist":[]}}'

Fetch

curl -sS "https://clawcontrols.com/v1/wpc/$POLICY_HASH_B64U" | jq .

Version: 0.1.0