01
Verify
Prove control of the upstream hostname and store its credential encrypted.
Invite-only provider pilot
Protect the provider key.
Control every call.
Give customers scoped access to your HTTPS API without sharing its credential. APIConduit meters dispatched requests and lets you revoke a caller, endpoint, or connection immediately.
The MVP is a limited design-partner program. Public signup and public pricing are not available.
One constrained path
From provider credential to revocable grant
The MVP supports server-to-server JSON POST requests to one verified HTTPS origin per connection.
02
Scope
Define the request path and a restricted JSON input schema.
03
Grant
Issue a one-time caller token with credit, rate, concurrency, and expiry limits.
04
Observe
Review request decisions and settled usage, then revoke access when needed.
A narrow security boundary
APIConduit is being validated as a control plane for provider access—not as an AI gateway, chatbot platform, marketplace, or compliance product.
- Exact HTTPS origin and JSON POST only
- Hashed grant tokens and encrypted provider credentials
- Transactional authorization, metering, and idempotency
- Content-minimized request and audit records
POST https://api.apiconduit.com/v1/conduits/demo/invoke
Authorization: Bearer ac_live_…
Idempotency-Key: req_123
Content-Type: application/json
{ "input": "caller-safe JSON" }
Bring one real provider endpoint
We are inviting a small number of API and tool providers to complete the end-to-end MVP flow and shape the beta.
Apply for the pilot