← Home · Portal · Developers

Company Quickstart

Get your company set up with Embassy in 5 minutes. All decisions routed through Embassy (via the API/SDK/gateway) produce signed receipts by default.

Step 1: Create a Portal Account

Go to /portal and create a company account with your email.

POST /api/account_create
{ "email": "you@company.com", "type": "company", "org_name": "Your Company" }

You'll receive a 6-digit verification code by email. Enter it to activate your account.

Step 2: Link Your Agents

Each agent you control needs to be linked to your organization. This requires proving ownership of the agent's private key.

1. Request a nonce: POST /api/org_link_agent_nonce with org_id + agent_id
2. Sign the nonce with the agent's Ed25519 private key
3. Submit the proof: POST /api/org_link_agent with signature + public key PEM

Once linked, the agent appears in your dashboard and receipts are queryable.

Step 3: Route Decisions Through Embassy

Use POST /api/decide (canonical) or POST /api/receipt_event (alias) to submit decision events:

POST /api/decide
Authorization: Bearer <session_token>
{
  "agent_id": "emb_...",
  "event_type": "decision.approve",
  "input_hash": "sha256hex (optional)",
  "output_hash": "sha256hex (optional)",
  "trace_id": "correlation-id (optional)",
  "prev_receipt_hash": "sha256hex (optional)"
}

You get back a signed decision_receipt immediately. Store it in your own systems (Phase 1 is customer-owned by default). Verify anytime via POST /api/verify.

Step 4: Export Receipts

Primary Phase 1 model: receipts are returned to you at decision time. You store full receipt bodies in your own storage.

The Portal helps you query and export receipt index metadata (fast, minimal) and generate audit bundles you can download and archive.

For audit bundles: POST /api/org_request_bundle with filters (index metadata), or upload your own full receipt objects via the receipts array to package customer-owned receipt bodies.

Step 5: Verify Anytime

Any receipt can be verified by anyone: POST /api/verify with the receipt object. No auth required for verification.

Plan Limits