How to use Ogat

Authenticate with an Ogat API key (never an OpenAI key). Org and app come from the key. Policy handles are unique within the app.

1. Create a draft

curl -s https://api.ogat.ai/v1/create-submission \
  -H "Authorization: Bearer ogt_…" \
  -H "Content-Type: application/json" \
  -d '{"policy":"sender-id-registration","data":{"name":"Acme"}}'

2. Review one input (live / on blur)

curl -s https://api.ogat.ai/v1/review-input \
  -H "Authorization: Bearer ogt_…" \
  -H "Content-Type: application/json" \
  -d '{"policy":"sender-id-registration","submissionId":"UUID","input":"website","value":"https://acme.com"}'

3. Review the whole submission

curl -s https://api.ogat.ai/v1/review-submission \
  -H "Authorization: Bearer ogt_…" \
  -H "Content-Type: application/json" \
  -d '{"policy":"sender-id-registration","inputs":{"website":"https://acme.com"}}'

Webhooks

Register a URL under Developers → Webhooks. We POST the decision JSON with X-Ogat-Signature (HMAC-SHA256 hex of the raw body).

API keys use the ogt_ prefix. All reviews count toward your plan credits — Free includes 1,000 credits per month with a 10% buffer. See the usage ledger for each review.

Machine-readable: /llms.txt and OpenAPI will live on the public docs site. For local use see docs/openapi.yaml in the repo.