api.affix-io.com
Remote verification, Merkle audit and attestation. SDK proof generation runs on your host.
Start with 100 free AffixIO proofs
New eligible Hub account holders can claim one allocation of 100 free SDK proofs. No card required. Use them to test SDK proofs, agent verification, agentic payment checks and transaction intent proof workflows.
See the free proof offerDevelopers
AffixIO API and SDK for developers
Install affixio, connect a trusted source and turn a defined check into verifiable evidence.
Bearer or X-API-Key
Use the API key issued for your licensed account or agent area. Keep it in your service environment.
OpenAPI
Live schema at /v1/openapi.json.
Quick start
- Sign in to AffixIO Hub and check your licence and proof allowance. For an agent area, follow BoundProof Agent provisioning.
- Install
affixioon Node.js 20 or later. - Point the SDK at https://api.affix-io.com with your key.
- Prove locally, sync for verify and ML-DSA-65 attestation.
Health and governance
- GET /api/health — service status and circuit catalogue
- GET /api/governance-stats — Merkle leaf counts and root
- GET /v1/openapi.json — OpenAPI schema
Trust model (SDK 2.0.4): verification fails closed against pinned keys (trustedSigningKeys; fetchAffixioKeys with expectedKeys via /v1/keys). POST /api/attest returns server_verified:false and is not proof of validity; use POST /v1/attest/proof or verify with requestAttestation: true. The server Merkle root is unsigned and holds a rolling 50,000 leaves. 1.x is deprecated for a security flaw; upgrade to 2.0.x. Details: /docs/#trust-model.
Install from npm
npm install affixioContinue with the SDK quick start, SQL and HTTP source examples, or merchant checkout checks.
Developer questions
API base, auth, packages, and limits.
What is the AffixIO API base URL?
https://api.affix-io.com for production. Health check: GET /api/health. OpenAPI: GET /v1/openapi.json.
How do I authenticate API requests?
Use the authentication required by the selected API route. SDK keys are managed through your licensed Hub account or agent area. A BoundProof Agent management key is distinct from an SDK API key.
What rate limits apply?
Public documentation cites about 10 requests per second per key unless contracted otherwise.
Which npm package should developers install?
Install affixio for Node.js 20 or later. It includes UltraHonk and HMAC proof modes. The source is published under Apache-2.0 at https://github.com/AffixIO/SDK.
Build around the action, not the label
An AI agent integration needs an authenticated caller, an explicit proposed operation and a check before execution. Personal-superintelligence terminology does not establish those conditions. Use the documented evidence mode and preserve the authorization controls already enforced by your application.
AI, superintelligence (SI), ASI and personal superintelligence: terms and boundaries