Base URL & versioning
Production gateway: https://api.hardalion.com. Routes are versioned under /v1/.
Authentication
Send Authorization: Bearer hdl_live_… or hdl_test_…. Keys are scoped; missing scope returns insufficient_scope.
Errors
Errors use a consistent object: error.code, error.message, optional error.param, and error.doc_url for stable anchors.
Agents API
POST /v1/agents/execute runs sync or streamed agent workflows with tool calling. Manage keys and samples from the dashboard.
Public compliance API
Stateless checks under /v1/public/compliance/… and /v1/public/risk/…: MiFID pre-trade, batch validation, Basel IV, and related endpoints. See the docs site for request schemas.
SDKs
NPM: @hardalion/sdk, @hardalion/agents, @hardalion/tools, @hardalion/mfa, @hardalion/triggers. Paths default to /v1/….
import { Hardalion } from '@hardalion/sdk'
const client = new Hardalion({ apiKey: process.env.HARDALION_API_KEY! })
await client.agents.execute({ ... })