Developer Portal
Build AI agents with confidence.
Secure, monitor and govern every AI action with a single API.
Why KorClaw
Governance built for developers
Everything you need to ship compliant AI agents without slowing down.
Governance without friction
Enforce policies and approvals without rewriting your AI stack.
Immutable audit trails
Every agent action recorded with tamper-evident logs for compliance.
BYOK architecture
Connect your own AI provider keys — KorClaw never resells LLM usage.
Minutes to integrate
SDKs, REST API, and webhooks designed for developer velocity.
Quick Start
Up and running in minutes
Follow these steps to protect your first AI agent.
- 1Join Early Access and create a workspace
- 2Generate an API key in Settings → API Keys
- 3Install the SDK for your language
- 4Register your first agent and send an audit event
Install SDK
Add KorClaw to your project
npm install @korclaw/sdkAuthentication
Bearer token authentication
Include your API key in the Authorization header for every request.
Authorization: Bearer kc_live_xxxxxxxxxCode Example
Log your first audit event
import { KorClaw } from "@korclaw/sdk";
const client = new KorClaw({
apiKey: process.env.KORCLAW_API_KEY,
});
await client.audit.create({
agent: "support-agent",
action: "email.send",
resource: "customer@example.com",
});API Playground
Try the API interactively
Select an endpoint, inspect the request, and preview the JSON response.
API Playground
Interactive mock request editor — choose an endpoint and inspect the response.
curl https://api.korclaw.com/v1/agents \
-H "Authorization: Bearer kc_live_xxxxxxxxx"API Keys
Key management best practices
Secure credential handling for development and production.
Development keys
Prefixed with kc_test_. Use in local development and staging. Never use in production.
Production keys
Prefixed with kc_live_. Restrict to production environments with strict access controls.
Rotation
Create a new key, update your services, then revoke the old key. Overlapping keys supported during migration.
Revocation
Revoked keys fail immediately with 401 Unauthorized. Revocation is permanent.
Permissions
Scope keys to specific resources — agents, policies, audit, approvals — with read/write granularity.
Rate limits
Limits apply per API key. See Rate Limits for tier details. 429 responses include Retry-After headers.
Rate Limits
Plans and throughput
| Plan | Limit | Description |
|---|---|---|
| Free ($0) | 100 requests/min | 1 workspace, 2 agents, 50 audit events/month — evaluation and personal projects. |
| Pro ($49/mo) | 1,000 requests/min | 20 agents, 1,000 audit events/month — growing teams and production workloads. |
| Business ($249/mo) | 5,000 requests/min | 100 agents, 10,000 audit events/month — high-volume enterprise deployments. |
| Enterprise | Custom | Custom agent and audit limits with dedicated, SLA-backed throughput. |
Webhooks
Supported events
Receive real-time notifications for agent and compliance lifecycle events.
agent.createdFired when a new AI agent is registered.policy.updatedFired when a compliance policy is created or changed.audit.createdFired when an immutable audit event is recorded.approval.completedFired when an approval is approved or rejected.billing.updatedFired when subscription or billing status changes.SDK Downloads
Official SDKs and REST API
Choose your language and start building.
Changelog
Recent releases
Initial Release
- REST API v1 with agents, policies, approvals, audit events, and reports
- Official SDKs for JavaScript, TypeScript, Python, and Go
- Policy engine with declarative rules and approval workflows
- Immutable audit logs and compliance report generation