Summit CognitiveDocs

PLATFORM

Surfaces & endpoints

A reference map of Summit Cognitive's public technical surfaces — where to point a client, what each one returns, and which calls need a key. Everything listed here is live and reachable today; for the canonical, always-current endpoint list, read the OpenAPI spec linked at the bottom.

Two services carry the platform: the Decision Receipt API, which evaluates autonomous agent actions and emits signed, hash-chained receipts, and the Platform API, which fronts the broader graph and intelligence surface. A separate TAXII discovery surface serves threat intelligence over the STIX/TAXII standard. The companion sites publish the written work that surrounds the platform.

Decision Receipt API

Base URL https://decrec.summitcognitive.ai. HTTPS, JSON request and response bodies. Read endpoints in the groups below are unauthenticated; write endpoints require an API key on the X-API-Key header (also accepted as a Bearer token in Authorization). The interactive Swagger reference is at decrec.summitcognitive.ai/docs, and a hosted playground lets you exercise the flow without writing code.

Health & status

No authentication. Use these for liveness checks and dashboards.

GET /health Service health check; ?deep=true adds storage connectivity
GET /v1/status Operational status with uptime and receipt counts
GET /v1/ledger/stats Aggregate statistics across all evaluated receipts

Core evaluation flow

Requires X-API-Key. These are the write endpoints that create and verify receipts.

POST /v1/evaluate Evaluate a claim for admissibility; returns a signed receipt
POST /v1/verify Verify a receipt's hash integrity and Ed25519 signature
POST /v1/simulate Dry-run policy evaluation without persisting a receipt
Note

POST /v1/verify checks a receipt you supply, but you can also verify offline against the server's published Ed25519 public key — no key of your own required for that path.

Keys

No authentication.

GET /v1/keys/server Server's Ed25519 public key (PEM) for offline verification

No authentication. Read across the receipt ledger and slice it by agent, repository, or pull request.

GET /v1/ledger Full ledger of all receipt entries
GET /v1/receipts/search Search by ?q=, ?agent=, ?repo=, ?verdict=
GET /v1/receipts/timeline Daily receipt counts, optionally by ?repository=
GET /v1/receipts/compare Side-by-side comparison by ?ids=id1,id2
GET /v1/receipts/diff Diff receipts for the same PR across pushes

Insight

No authentication. Roll-ups for dashboards and observability.

GET /v1/repos Per-repository receipt summary with acceptance rates
GET /v1/agents Per-agent receipt breakdown
GET /v1/overview System-wide overview of receipts, agents, and repos
GET /v1/metrics Prometheus-compatible metrics

Specification

GET /v1/openapi.json Machine-readable OpenAPI/Swagger specification

Platform API

Base URL https://api.summitcognitive.ai. A health endpoint confirms the platform is up.

GET /health Returns {"status":"ok"} when the platform is reachable

TAXII 2.1 threat-intel discovery

Base URL https://taxii.summitcognitive.ai/taxii2/. A standards-compliant STIX/TAXII 2.1 discovery surface for threat-intelligence collections. Authentication is required — an unauthenticated request returns 401. Point a TAXII 2.1 client at the discovery URL with valid credentials to enumerate the available API roots and collections.

GET /taxii2/ TAXII 2.1 discovery (credentials required; 401 without)

Companion sites

The platform sits alongside a set of published surfaces — the written and recorded work that frames how Summit Cognitive thinks about admissible, accountable autonomy.

This page is a curated map, not the contract. The canonical, always-current list of Decision Receipt API endpoints — with full schemas, parameters, and status codes — is the live OpenAPI specification at /v1/openapi.json, rendered interactively at decrec.summitcognitive.ai/docs. When this page and the spec disagree, the spec wins.