Infrastructure Documentation

SwiftAPI Authority does not execute actions and does not run agents. It issues verifiable permission artifacts that external enforcement points check before allowing execution.

No attestation, no execution.

Install

pip install swiftapi-python

Guard an action

from swiftapi import SwiftAPI, Enforcement

api = SwiftAPI(key="swiftapi_live_...")
guard = Enforcement(api)

guard.run(
    func=destructive_action,
    action="database_drop",
    intent="Schema cleanup script",
)

• Local Ed25519 signature verification.
• Real-time revocation checks and replay defense.
• Fail-closed behavior when verification cannot be completed.

OpenAI-compatible wrapper

from swiftapi import OpenAI

client = OpenAI(
    swiftapi_key="swiftapi_live_...",
    openai_key="sk-...",
)

response = client.chat.completions.create(
    model="gpt-5.2",
    messages=[{"role": "user", "content": "Hello"}],
)

Anthropic-compatible wrapper

from swiftapi import Anthropic

client = Anthropic(
    swiftapi_key="swiftapi_live_...",
    anthropic_key="sk-ant-...",
)

The SDK obtains an attestation from SwiftAPI Authority, then calls the selected provider with the customer's provider key. Provider keys are not sent to SwiftAPI Authority.

getswiftapi.com website APIs

These routes support the public research site, enterprise intake, and hidden legacy operations.

swiftapi.ai public authority APIs

swiftapi.ai protected authority APIs

Protected authority endpoints require the X-SwiftAPI-Authority header.

The optional OpenClaw extension maps raw tool names to stable action families before requesting an attestation. Strict mode blocks unknown mappings and fails closed when the authority cannot be reached.

{
  "plugins": {
    "entries": {
      "swiftapi": {
        "enabled": true,
        "config": {
          "key": "swiftapi_live_...",
          "failClosed": true,
          "strictActionTypeMapping": true
        }
      }
    }
  }
}

Canonical families include runtime execution, filesystem reads and writes, control-plane operations, scheduled-job mutation, message delivery and moderation, network egress, and media generation.