{
  "info": {
    "name": "Sharp Trust — Merchant & PSP API",
    "description": "Partner pack for the Sharp Trust API from Sharp Labs. Create a shai_test_ key at https://trust.sharp-labs.com/portal and set apiKey below. Never commit real keys. Full docs: https://trust.sharp-labs.com/docs",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
  },
  "variable": [
    { "key": "baseUrl", "value": "https://trust.sharp-labs.com" },
    { "key": "apiKey", "value": "", "description": "Paste your shai_test_ key. Never commit or share it." }
  ],
  "item": [
    {
      "name": "Create assessment (minimum)",
      "request": {
        "method": "POST",
        "header": [
          { "key": "Authorization", "value": "Bearer {{apiKey}}" },
          { "key": "Content-Type", "value": "application/json" },
          { "key": "Idempotency-Key", "value": "{{$guid}}" }
        ],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"platform_transaction_ref\": \"your-own-transaction-id\",\n  \"buyer_agent\": { \"external_ref\": \"the-agent-identifier\" },\n  \"amount\": { \"value\": \"48.00\", \"currency\": \"USD\" },\n  \"merchant_meta\": { \"name\": \"acme-subscriptions\" }\n}\n"
        },
        "url": "{{baseUrl}}/v1/assessments",
        "description": "Minimum partner request. Cold start typically returns recommendation REVIEW with a low evidence_confidence (little data, not necessarily risk)."
      }
    },
    {
      "name": "Create assessment (full evidence)",
      "request": {
        "method": "POST",
        "header": [
          { "key": "Authorization", "value": "Bearer {{apiKey}}" },
          { "key": "Content-Type", "value": "application/json" },
          { "key": "Idempotency-Key", "value": "{{$guid}}" }
        ],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"platform_transaction_ref\": \"your-own-transaction-id\",\n  \"buyer_agent\": { \"external_ref\": \"the-agent-identifier\" },\n  \"seller_agent\": { \"external_ref\": \"acme-seller-id\" },\n  \"amount\": { \"value\": \"48.00\", \"currency\": \"USD\" },\n  \"merchant_meta\": { \"name\": \"acme-subscriptions\", \"url\": \"acme.com\" },\n  \"intent_summary\": \"Subscribe to Acme Pro\",\n  \"evidence\": {\n    \"mandates\": {\n      \"amount_cap\": \"100.00\",\n      \"currency\": \"USD\",\n      \"counterparty\": \"acme-subscriptions\",\n      \"effective_until\": \"2030-01-01T00:00:00Z\",\n      \"amount_tolerance_percent\": 15\n    },\n    \"intent\": {\n      \"instruction\": \"subscribe me to Acme Pro\",\n      \"agent_context\": \"Acme Pro annual plan, $48/yr, cancel anytime\",\n      \"item_description\": \"Acme Pro subscription\"\n    },\n    \"session\": {\n      \"human_verified\": true,\n      \"session_bound\": true,\n      \"provider\": \"your-idv-provider\"\n    }\n  }\n}\n"
        },
        "url": "{{baseUrl}}/v1/assessments",
        "description": "Rich request. Shows mandate (with amount tolerance and assurance), intent + prompt-injection context, and consumer/session assurance. For a natural-language mandate send evidence.mandates.instruction; for Basis Theory send evidence.mandates.allowance_id; for a signed agent send evidence.agent_signature (add signature_agent for open Web Bot Auth and source_ip for the infrastructure check). Response includes recommendation, agent_trust, transaction_risk, evidence_confidence, and reason_codes."
      }
    },
    {
      "name": "Get assessment by id",
      "request": {
        "method": "GET",
        "header": [ { "key": "Authorization", "value": "Bearer {{apiKey}}" } ],
        "url": "{{baseUrl}}/v1/assessments/:assessment_id",
        "description": "Replace assessment_id with the id from the create response."
      }
    },
    {
      "name": "List assessments",
      "request": {
        "method": "GET",
        "header": [ { "key": "Authorization", "value": "Bearer {{apiKey}}" } ],
        "url": "{{baseUrl}}/v1/assessments?limit=25"
      }
    },
    {
      "name": "Report outcome (chargeback)",
      "request": {
        "method": "POST",
        "header": [
          { "key": "Authorization", "value": "Bearer {{apiKey}}" },
          { "key": "Content-Type", "value": "application/json" }
        ],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"transaction_ref\": \"your-own-transaction-id\",\n  \"type\": \"chargeback\",\n  \"final\": true,\n  \"source\": \"network\",\n  \"occurred_at\": \"2026-08-24T12:00:00Z\",\n  \"amount\": 48.00\n}\n"
        },
        "url": "{{baseUrl}}/v1/outcomes",
        "description": "Report what happened. type is one of authorization, capture, settlement, reversal, refund, dispute, chargeback, fraud. Only final, reputational outcomes move reputation; source (network/psp/merchant/platform) weights it. Opaque ids only, never a PAN."
      }
    },
    {
      "name": "Get audit trail",
      "request": {
        "method": "GET",
        "header": [ { "key": "Authorization", "value": "Bearer {{apiKey}}" } ],
        "url": "{{baseUrl}}/v1/audit-trail",
        "description": "The tamper-evident, hash-chained log of recorded outcomes, with a verification flag."
      }
    }
  ]
}