Run compliance check

curl --request POST \
  --url https://api.zebratruth.ai/v1/compliance/check \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: <idempotency-key>' \
  --data '
{
  "jurisdictions": [
    "us",
    "eu"
  ],
  "platforms": [
    "youtube",
    "instagram"
  ],
  "content": {
    "text": "Try our guaranteed weight loss solution!",
    "imageUrls": [
      "<string>"
    ]
  },
  "mode": "fast",
  "responseMode": "sync",
  "webhookUrl": "<string>",
  "callbackId": "<string>",
  "externalId": "<string>",
  "industryOverlays": [],
  "reviewScopes": [
    "advisory_suitability"
  ],
  "regulatedActors": []
}
'

import requests

url = "https://api.zebratruth.ai/v1/compliance/check"

payload = {
    "jurisdictions": ["us", "eu"],
    "platforms": ["youtube", "instagram"],
    "content": {
        "text": "Try our guaranteed weight loss solution!",
        "imageUrls": ["<string>"]
    },
    "mode": "fast",
    "responseMode": "sync",
    "webhookUrl": "<string>",
    "callbackId": "<string>",
    "externalId": "<string>",
    "industryOverlays": [],
    "reviewScopes": ["advisory_suitability"],
    "regulatedActors": []
}
headers = {
    "Idempotency-Key": "<idempotency-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    jurisdictions: ['us', 'eu'],
    platforms: ['youtube', 'instagram'],
    content: {text: 'Try our guaranteed weight loss solution!', imageUrls: ['<string>']},
    mode: 'fast',
    responseMode: 'sync',
    webhookUrl: '<string>',
    callbackId: '<string>',
    externalId: '<string>',
    industryOverlays: [],
    reviewScopes: ['advisory_suitability'],
    regulatedActors: []
  })
};

fetch('https://api.zebratruth.ai/v1/compliance/check', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.zebratruth.ai/v1/compliance/check",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'jurisdictions' => [
        'us',
        'eu'
    ],
    'platforms' => [
        'youtube',
        'instagram'
    ],
    'content' => [
        'text' => 'Try our guaranteed weight loss solution!',
        'imageUrls' => [
                '<string>'
        ]
    ],
    'mode' => 'fast',
    'responseMode' => 'sync',
    'webhookUrl' => '<string>',
    'callbackId' => '<string>',
    'externalId' => '<string>',
    'industryOverlays' => [
        
    ],
    'reviewScopes' => [
        'advisory_suitability'
    ],
    'regulatedActors' => [
        
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "Idempotency-Key: <idempotency-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.zebratruth.ai/v1/compliance/check"

	payload := strings.NewReader("{\n  \"jurisdictions\": [\n    \"us\",\n    \"eu\"\n  ],\n  \"platforms\": [\n    \"youtube\",\n    \"instagram\"\n  ],\n  \"content\": {\n    \"text\": \"Try our guaranteed weight loss solution!\",\n    \"imageUrls\": [\n      \"<string>\"\n    ]\n  },\n  \"mode\": \"fast\",\n  \"responseMode\": \"sync\",\n  \"webhookUrl\": \"<string>\",\n  \"callbackId\": \"<string>\",\n  \"externalId\": \"<string>\",\n  \"industryOverlays\": [],\n  \"reviewScopes\": [\n    \"advisory_suitability\"\n  ],\n  \"regulatedActors\": []\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Idempotency-Key", "<idempotency-key>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.zebratruth.ai/v1/compliance/check")
  .header("Idempotency-Key", "<idempotency-key>")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"jurisdictions\": [\n    \"us\",\n    \"eu\"\n  ],\n  \"platforms\": [\n    \"youtube\",\n    \"instagram\"\n  ],\n  \"content\": {\n    \"text\": \"Try our guaranteed weight loss solution!\",\n    \"imageUrls\": [\n      \"<string>\"\n    ]\n  },\n  \"mode\": \"fast\",\n  \"responseMode\": \"sync\",\n  \"webhookUrl\": \"<string>\",\n  \"callbackId\": \"<string>\",\n  \"externalId\": \"<string>\",\n  \"industryOverlays\": [],\n  \"reviewScopes\": [\n    \"advisory_suitability\"\n  ],\n  \"regulatedActors\": []\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.zebratruth.ai/v1/compliance/check")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Idempotency-Key"] = '<idempotency-key>'
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"jurisdictions\": [\n    \"us\",\n    \"eu\"\n  ],\n  \"platforms\": [\n    \"youtube\",\n    \"instagram\"\n  ],\n  \"content\": {\n    \"text\": \"Try our guaranteed weight loss solution!\",\n    \"imageUrls\": [\n      \"<string>\"\n    ]\n  },\n  \"mode\": \"fast\",\n  \"responseMode\": \"sync\",\n  \"webhookUrl\": \"<string>\",\n  \"callbackId\": \"<string>\",\n  \"externalId\": \"<string>\",\n  \"industryOverlays\": [],\n  \"reviewScopes\": [\n    \"advisory_suitability\"\n  ],\n  \"regulatedActors\": []\n}"

response = http.request(request)
puts response.read_body

{
  "requestId": "<string>",
  "reportId": "rpt_abc123",
  "score": 72,
  "decision": "PUBLISH",
  "checks": [
    {
      "id": "chk_a1b2c3d4",
      "agentId": "ai-laws",
      "checkName": "Unsubstantiated Health Claim - 'Cure Cancer'",
      "status": "pass",
      "severity": "critical",
      "message": "'Guaranteed to cure cancer' is an unsubstantiated health claim under FTC and EU UCPD.",
      "recommendation": "Remove the guarantee or substantiate with peer-reviewed clinical evidence.",
      "citation": "FTC Endorsement Guides, 16 CFR Part 255",
      "metadata": "<string>",
      "jurisdictions": [
        "us",
        "eu"
      ],
      "platforms": [
        "youtube",
        "instagram"
      ],
      "scope": "global",
      "primaryCategory": "celebrity-endorsement",
      "categories": [
        "unsubstantiated-health-claim",
        "performance-claim"
      ]
    }
  ],
  "checksById": {},
  "indexes": {
    "byJurisdiction": {},
    "byPlatform": {},
    "bySeverity": {},
    "byStatus": {},
    "byCategory": {},
    "byCategoryAll": {},
    "byAgent": {}
  },
  "annotations": [
    {
      "type": "text-span",
      "agentId": "ai-laws",
      "severity": "critical",
      "message": "'Guaranteed results' may violate FTC endorsement guides",
      "checkRef": "<string>",
      "checkId": "chk_a1b2c3d4",
      "suggestion": "Consider 'may help' instead of 'guaranteed'",
      "textLocation": {
        "start": 120,
        "end": 138,
        "matchedText": "guaranteed results"
      },
      "timelineLocation": {
        "startMs": 15000,
        "endMs": 28000,
        "track": "audio"
      },
      "imageLocation": {
        "imageUrl": "<string>",
        "boundingBox": {
          "x": 123,
          "y": 123,
          "width": 123,
          "height": 123
        }
      }
    }
  ],
  "profile": {
    "detectedJurisdictions": [
      "<string>"
    ],
    "applicableRules": [
      {}
    ],
    "targetPlatforms": [
      "<string>"
    ],
    "confidence": 0.5,
    "reasoning": "<string>"
  },
  "agentSummaries": {},
  "versionInfo": {
    "engineVersion": "1.3.2",
    "rulesVersion": "2026-04-01",
    "agentVersions": {
      "advertising-law": "1.1.0",
      "ai-laws": "1.3.0"
    },
    "stackVersion": "2026.04-a7f3"
  },
  "costBreakdown": {
    "totalCredits": 123,
    "agents": [
      {
        "agent": "jurisdiction",
        "stage": "A",
        "credits": 123,
        "cached": false
      }
    ]
  },
  "creditsCharged": 123,
  "cached": true,
  "coverageIncomplete": true,
  "coverageGaps": [
    {
      "agentId": "<string>",
      "reason": "memory_disabled"
    }
  ],
  "analysisDiagnostics": [
    {
      "code": "evidence_truncated",
      "message": "<string>",
      "severity": "info",
      "evidenceIds": [
        "<string>"
      ]
    }
  ],
  "regulatedActors": [
    "advertiser"
  ],
  "agentsRun": [
    {
      "id": "ai-laws",
      "outcome": "completed",
      "reason": "timeout"
    }
  ],
  "decisionReasons": [
    "blocking_check"
  ],
  "_meta": {
    "mode": "test",
    "sandbox": true,
    "creditsCharged": 123,
    "estimatedProductionCost": 123,
    "scenarioId": "claim-violation"
  }
}

{
  "statusCode": 123,
  "message": "<string>",
  "error": true,
  "url": "<string>",
  "statusMessage": "<string>",
  "data": {
    "code": "review_scope_not_enabled"
  }
}

{
  "statusCode": 401,
  "message": "Invalid API key",
  "error": true,
  "url": "https://api.zebratruth.ai/v1/whoami",
  "statusMessage": "Invalid API key"
}

{
  "statusCode": 402,
  "message": "Insufficient credits",
  "error": true,
  "url": "<string>",
  "statusMessage": "Insufficient credits",
  "data": {
    "creditsRemaining": 3,
    "creditsNeeded": 123,
    "upgradeUrl": "https://developers.zebratruth.ai/dashboard/billing"
  }
}

{
  "statusCode": 123,
  "message": "<string>",
  "error": true,
  "url": "<string>",
  "statusMessage": "<string>",
  "data": {
    "code": "review_scope_not_enabled"
  }
}

{
  "statusCode": 123,
  "message": "<string>",
  "error": true,
  "url": "<string>",
  "statusMessage": "<string>",
  "data": {
    "code": "review_scope_not_enabled"
  }
}

{
  "statusCode": 123,
  "message": "<string>",
  "error": true,
  "url": "<string>",
  "statusMessage": "<string>",
  "data": {
    "code": "review_scope_not_enabled"
  }
}

{
  "statusCode": 123,
  "message": "<string>",
  "error": true,
  "url": "<string>",
  "statusMessage": "<string>",
  "data": {
    "code": "review_scope_not_enabled"
  }
}

{
  "statusCode": 429,
  "message": "Rate limit exceeded",
  "error": true,
  "url": "<string>",
  "statusMessage": "Rate limit exceeded",
  "data": {
    "retryAfter": 5,
    "limit": 60,
    "remaining": 0
  }
}

Compliance Checks

Run compliance check

Check content against jurisdiction laws, platform policies, and rights clearance. Supports three response modes: sync (block until complete), stream (SSE events per agent), and async (webhook callback on completion).

Request formats. Accepts either application/json (the canonical format, full feature set including streaming and webhooks) or multipart/form-data (for uploading image binaries directly from a local file system). The multipart form is sync-only and bypasses the response cache (cache is keyed on text, so mixing image sets would return wrong results).

Latency. Sync checks typically complete in 15–120 seconds depending on mode, number of jurisdictions/platforms, and content length. Cached hits return in ≤1s. Set client timeouts to at least 2.5 minutes (150s). For long-running or batched workflows, prefer responseMode: "async" with a webhook to avoid long-held connections.

Tenant scoping. Every request is scoped to your account’s subscribed jurisdictions and platforms (set during onboarding at https://developers.zebratruth.ai). Requesting a jurisdiction or platform outside that set returns 403. See the Tenant Onboarding and Scoping guide.

Financial services. Workspaces on the financial_services industry select the specialist review scopes a check should run with reviewScopes, describe the artifact with contentKind, and may narrow the regulated actors with regulatedActors. Admission is checked in this order, all before any credits are reserved: unknown or disabled scope (400 review_scope_not_enabled), scope without corpus coverage for a requested jurisdiction (400 review_scope_jurisdiction_unsupported), actor not enabled on the workspace (400 regulated_actor_not_enabled), scope not in the plan (403 review_scope_not_entitled). Successful responses then carry agentsRun and decisionReasons. At most 6 specialist agents run per request.

Documents. The multipart form accepts a single document part (PDF or Word .docx) in place of text. The document is extracted server-side and checked as text. To inspect the extracted text first, call POST /compliance/documents/extract.

POST

compliance

check

Run compliance check

curl --request POST \
  --url https://api.zebratruth.ai/v1/compliance/check \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: <idempotency-key>' \
  --data '
{
  "jurisdictions": [
    "us",
    "eu"
  ],
  "platforms": [
    "youtube",
    "instagram"
  ],
  "content": {
    "text": "Try our guaranteed weight loss solution!",
    "imageUrls": [
      "<string>"
    ]
  },
  "mode": "fast",
  "responseMode": "sync",
  "webhookUrl": "<string>",
  "callbackId": "<string>",
  "externalId": "<string>",
  "industryOverlays": [],
  "reviewScopes": [
    "advisory_suitability"
  ],
  "regulatedActors": []
}
'

import requests

url = "https://api.zebratruth.ai/v1/compliance/check"

payload = {
    "jurisdictions": ["us", "eu"],
    "platforms": ["youtube", "instagram"],
    "content": {
        "text": "Try our guaranteed weight loss solution!",
        "imageUrls": ["<string>"]
    },
    "mode": "fast",
    "responseMode": "sync",
    "webhookUrl": "<string>",
    "callbackId": "<string>",
    "externalId": "<string>",
    "industryOverlays": [],
    "reviewScopes": ["advisory_suitability"],
    "regulatedActors": []
}
headers = {
    "Idempotency-Key": "<idempotency-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    jurisdictions: ['us', 'eu'],
    platforms: ['youtube', 'instagram'],
    content: {text: 'Try our guaranteed weight loss solution!', imageUrls: ['<string>']},
    mode: 'fast',
    responseMode: 'sync',
    webhookUrl: '<string>',
    callbackId: '<string>',
    externalId: '<string>',
    industryOverlays: [],
    reviewScopes: ['advisory_suitability'],
    regulatedActors: []
  })
};

fetch('https://api.zebratruth.ai/v1/compliance/check', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.zebratruth.ai/v1/compliance/check",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'jurisdictions' => [
        'us',
        'eu'
    ],
    'platforms' => [
        'youtube',
        'instagram'
    ],
    'content' => [
        'text' => 'Try our guaranteed weight loss solution!',
        'imageUrls' => [
                '<string>'
        ]
    ],
    'mode' => 'fast',
    'responseMode' => 'sync',
    'webhookUrl' => '<string>',
    'callbackId' => '<string>',
    'externalId' => '<string>',
    'industryOverlays' => [
        
    ],
    'reviewScopes' => [
        'advisory_suitability'
    ],
    'regulatedActors' => [
        
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "Idempotency-Key: <idempotency-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.zebratruth.ai/v1/compliance/check"

	payload := strings.NewReader("{\n  \"jurisdictions\": [\n    \"us\",\n    \"eu\"\n  ],\n  \"platforms\": [\n    \"youtube\",\n    \"instagram\"\n  ],\n  \"content\": {\n    \"text\": \"Try our guaranteed weight loss solution!\",\n    \"imageUrls\": [\n      \"<string>\"\n    ]\n  },\n  \"mode\": \"fast\",\n  \"responseMode\": \"sync\",\n  \"webhookUrl\": \"<string>\",\n  \"callbackId\": \"<string>\",\n  \"externalId\": \"<string>\",\n  \"industryOverlays\": [],\n  \"reviewScopes\": [\n    \"advisory_suitability\"\n  ],\n  \"regulatedActors\": []\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Idempotency-Key", "<idempotency-key>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.zebratruth.ai/v1/compliance/check")
  .header("Idempotency-Key", "<idempotency-key>")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"jurisdictions\": [\n    \"us\",\n    \"eu\"\n  ],\n  \"platforms\": [\n    \"youtube\",\n    \"instagram\"\n  ],\n  \"content\": {\n    \"text\": \"Try our guaranteed weight loss solution!\",\n    \"imageUrls\": [\n      \"<string>\"\n    ]\n  },\n  \"mode\": \"fast\",\n  \"responseMode\": \"sync\",\n  \"webhookUrl\": \"<string>\",\n  \"callbackId\": \"<string>\",\n  \"externalId\": \"<string>\",\n  \"industryOverlays\": [],\n  \"reviewScopes\": [\n    \"advisory_suitability\"\n  ],\n  \"regulatedActors\": []\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.zebratruth.ai/v1/compliance/check")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Idempotency-Key"] = '<idempotency-key>'
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"jurisdictions\": [\n    \"us\",\n    \"eu\"\n  ],\n  \"platforms\": [\n    \"youtube\",\n    \"instagram\"\n  ],\n  \"content\": {\n    \"text\": \"Try our guaranteed weight loss solution!\",\n    \"imageUrls\": [\n      \"<string>\"\n    ]\n  },\n  \"mode\": \"fast\",\n  \"responseMode\": \"sync\",\n  \"webhookUrl\": \"<string>\",\n  \"callbackId\": \"<string>\",\n  \"externalId\": \"<string>\",\n  \"industryOverlays\": [],\n  \"reviewScopes\": [\n    \"advisory_suitability\"\n  ],\n  \"regulatedActors\": []\n}"

response = http.request(request)
puts response.read_body

{
  "requestId": "<string>",
  "reportId": "rpt_abc123",
  "score": 72,
  "decision": "PUBLISH",
  "checks": [
    {
      "id": "chk_a1b2c3d4",
      "agentId": "ai-laws",
      "checkName": "Unsubstantiated Health Claim - 'Cure Cancer'",
      "status": "pass",
      "severity": "critical",
      "message": "'Guaranteed to cure cancer' is an unsubstantiated health claim under FTC and EU UCPD.",
      "recommendation": "Remove the guarantee or substantiate with peer-reviewed clinical evidence.",
      "citation": "FTC Endorsement Guides, 16 CFR Part 255",
      "metadata": "<string>",
      "jurisdictions": [
        "us",
        "eu"
      ],
      "platforms": [
        "youtube",
        "instagram"
      ],
      "scope": "global",
      "primaryCategory": "celebrity-endorsement",
      "categories": [
        "unsubstantiated-health-claim",
        "performance-claim"
      ]
    }
  ],
  "checksById": {},
  "indexes": {
    "byJurisdiction": {},
    "byPlatform": {},
    "bySeverity": {},
    "byStatus": {},
    "byCategory": {},
    "byCategoryAll": {},
    "byAgent": {}
  },
  "annotations": [
    {
      "type": "text-span",
      "agentId": "ai-laws",
      "severity": "critical",
      "message": "'Guaranteed results' may violate FTC endorsement guides",
      "checkRef": "<string>",
      "checkId": "chk_a1b2c3d4",
      "suggestion": "Consider 'may help' instead of 'guaranteed'",
      "textLocation": {
        "start": 120,
        "end": 138,
        "matchedText": "guaranteed results"
      },
      "timelineLocation": {
        "startMs": 15000,
        "endMs": 28000,
        "track": "audio"
      },
      "imageLocation": {
        "imageUrl": "<string>",
        "boundingBox": {
          "x": 123,
          "y": 123,
          "width": 123,
          "height": 123
        }
      }
    }
  ],
  "profile": {
    "detectedJurisdictions": [
      "<string>"
    ],
    "applicableRules": [
      {}
    ],
    "targetPlatforms": [
      "<string>"
    ],
    "confidence": 0.5,
    "reasoning": "<string>"
  },
  "agentSummaries": {},
  "versionInfo": {
    "engineVersion": "1.3.2",
    "rulesVersion": "2026-04-01",
    "agentVersions": {
      "advertising-law": "1.1.0",
      "ai-laws": "1.3.0"
    },
    "stackVersion": "2026.04-a7f3"
  },
  "costBreakdown": {
    "totalCredits": 123,
    "agents": [
      {
        "agent": "jurisdiction",
        "stage": "A",
        "credits": 123,
        "cached": false
      }
    ]
  },
  "creditsCharged": 123,
  "cached": true,
  "coverageIncomplete": true,
  "coverageGaps": [
    {
      "agentId": "<string>",
      "reason": "memory_disabled"
    }
  ],
  "analysisDiagnostics": [
    {
      "code": "evidence_truncated",
      "message": "<string>",
      "severity": "info",
      "evidenceIds": [
        "<string>"
      ]
    }
  ],
  "regulatedActors": [
    "advertiser"
  ],
  "agentsRun": [
    {
      "id": "ai-laws",
      "outcome": "completed",
      "reason": "timeout"
    }
  ],
  "decisionReasons": [
    "blocking_check"
  ],
  "_meta": {
    "mode": "test",
    "sandbox": true,
    "creditsCharged": 123,
    "estimatedProductionCost": 123,
    "scenarioId": "claim-violation"
  }
}

{
  "statusCode": 123,
  "message": "<string>",
  "error": true,
  "url": "<string>",
  "statusMessage": "<string>",
  "data": {
    "code": "review_scope_not_enabled"
  }
}

{
  "statusCode": 401,
  "message": "Invalid API key",
  "error": true,
  "url": "https://api.zebratruth.ai/v1/whoami",
  "statusMessage": "Invalid API key"
}

{
  "statusCode": 402,
  "message": "Insufficient credits",
  "error": true,
  "url": "<string>",
  "statusMessage": "Insufficient credits",
  "data": {
    "creditsRemaining": 3,
    "creditsNeeded": 123,
    "upgradeUrl": "https://developers.zebratruth.ai/dashboard/billing"
  }
}

{
  "statusCode": 123,
  "message": "<string>",
  "error": true,
  "url": "<string>",
  "statusMessage": "<string>",
  "data": {
    "code": "review_scope_not_enabled"
  }
}

{
  "statusCode": 123,
  "message": "<string>",
  "error": true,
  "url": "<string>",
  "statusMessage": "<string>",
  "data": {
    "code": "review_scope_not_enabled"
  }
}

{
  "statusCode": 123,
  "message": "<string>",
  "error": true,
  "url": "<string>",
  "statusMessage": "<string>",
  "data": {
    "code": "review_scope_not_enabled"
  }
}

{
  "statusCode": 123,
  "message": "<string>",
  "error": true,
  "url": "<string>",
  "statusMessage": "<string>",
  "data": {
    "code": "review_scope_not_enabled"
  }
}

{
  "statusCode": 429,
  "message": "Rate limit exceeded",
  "error": true,
  "url": "<string>",
  "statusMessage": "Rate limit exceeded",
  "data": {
    "retryAfter": 5,
    "limit": 60,
    "remaining": 0
  }
}

Authorizations

Authorization

string

header

required

API key starting with zt_live_ (production) or zt_test_ (sandbox). Get your key at https://developers.zebratruth.ai

Headers

Idempotency-Key

string<uuid>

required

Unique request identifier to prevent duplicate execution and double-charging. Generate a new UUID for each distinct request. Reuse the same key to safely retry.

Body

jurisdictions

enum<string>[]

required

Which jurisdiction laws to check against

Available options:

us,

eu,

uk,

india,

china

Example:

["us", "eu"]

platforms

enum<string>[]

required

Which platform policies to check

Available options:

youtube,

instagram,

facebook,

tiktok,

linkedin

Example:

["youtube", "instagram"]

content

object

required

Show child attributes

mode

enum<string>

fast — All agents run in parallel
full — 4-phase pipeline with content enrichment

Available options:

fast,

full

Example:

"fast"

responseMode

enum<string>

default:sync

sync — Block until complete, return full report
stream — SSE events per agent (progressive results)
async — Return immediately, deliver result via webhook

Available options:

sync,

stream,

async

webhookUrl

string<uri>

Required for async mode — where to POST results

callbackId

string

Your correlation ID, echoed back in webhook payload

externalId

string

Your own reference ID, queryable in request logs

industryOverlays

enum<string>[]

Narrow the industry rule sets applied to this request to a subset of the workspace's industries. Omit to apply every industry the workspace has selected.

Available options:

financial_services,

pharma_healthcare

reviewScopes

enum<string>[]

Financial-services review scopes to run. Each scope maps to one specialist agent. Must be a subset of the scopes enabled on the workspace and covered for every requested jurisdiction. Omit to run the workspace's enabled scopes.

Maximum array length: 6

A financial-services review scope. Each maps to one specialist agent: financial promotions, disclosures and conduct; investment advice and suitability; credit origination, servicing and collections; order execution, transaction reporting and market abuse; KYC, AML/CFT, fraud and sanctions; AI governance, model risk and automated decisions. Coverage is US, EU and UK for every scope, plus China and India for financial_promotion.

Available options:

financial_promotion,

advisory_suitability,

credit_servicing,

markets_trading,

financial_crime,

ai_governance

Example:

["advisory_suitability"]

contentKind

enum<string>

What kind of artifact the check is looking at. Adds applicability triggers and ranks the obligations the specialists cite. It never removes a selected review scope.

Available options:

marketing,

suitability_report,

advice_letter,

precontract_disclosure,

adverse_action_notice,

collections_communication,

arrears_notice,

fund_factsheet,

research_note,

trader_communication,

best_execution_disclosure,

kyc_onboarding,

scam_warning,

aml_policy,

ai_policy,

model_documentation,

other

regulatedActors

enum<string>[]

Narrow the regulated actors this check evaluates to a subset of the workspace's actor set. Rules that bind an incompatible actor cannot drive blocking findings. Must be a subset of the workspace set (400 regulated_actor_not_enabled).

Maximum array length: 17

The regulated party a check is evaluating. Corpus rules tagged with an incompatible actor are excluded from asserted citations and cannot drive blocking findings.

Available options:

advertiser,

manufacturer,

platform,

provider,

payer,

pharmacy,

HCP,

telehealth_provider,

adviser,

broker_dealer,

bank,

lender,

servicer,

debt_collector,

fund_manager,

payment_service_provider,

insurer

regulatedActor

enum<string>

Single-actor form of regulatedActors, kept for older clients. Prefer regulatedActors.

Available options:

advertiser,

manufacturer,

platform,

provider,

payer,

pharmacy,

HCP,

telehealth_provider,

adviser,

broker_dealer,

bank,

lender,

servicer,

debt_collector,

fund_manager,

payment_service_provider,

insurer

Response

Compliance report (sync mode). For stream mode, returns text/event-stream. For async mode, returns job info with poll URL.

Option 1
Option 2

requestId

string

Identifier of this check, usable with GET /compliance/checks/{requestId} and in request logs.

reportId

string

Example:

"rpt_abc123"

score

integer

Required range: 0 <= x <= 100

Example:

72

decision

enum<string>

PUBLISH — Score 80-100, safe to publish
HOLD — Score 60-79, or any high-severity flag
BLOCK — Score 0-59, or any critical-severity check

Available options:

PUBLISH,

HOLD,

BLOCK

checks

object[]

All compliance findings. Each check has structured classification metadata (id, jurisdictions, platforms, scope, primaryCategory, categories) added inline. Combine bySeverity + byJurisdiction etc. via the indexes field for filtered views.

Show child attributes

checksById

object

O(1) lookup map keyed by stable id. Same data as checks[], indexed for direct access (e.g. when resolving an annotation's checkId to its parent check).

Show child attributes

indexes

object

Pre-computed reference indexes — pure ID lists, no content duplication. Tenants pick whichever organization fits their UI. Combine via set intersection (e.g., critical EU findings = bySeverity.critical ∩ byJurisdiction.eu). All seven dimensions always present; empty buckets are included so client code can do indexes.byJurisdiction.us ?? [] without optional-chaining on the bucket itself.

Show child attributes

annotations

object[]

Show child attributes

profile

object

Show child attributes

agentSummaries

object

Show child attributes

versionInfo

object

Show child attributes

costBreakdown

object

Show child attributes

creditsCharged

number

Credits debited for this request. 0 on a cache hit.

cached

boolean

true when the result was served from the response cache or an idempotent replay.

coverageIncomplete

boolean

true when at least one agent could not consult its legal corpus. Always equals coverageGaps.length > 0.

coverageGaps

object[]

Show child attributes

analysisDiagnostics

object[]

Pipeline diagnostics that are not compliance findings.

Show child attributes

regulatedActors

enum<string>[]

Present when the check was evaluated for specific regulated actors.

The regulated party a check is evaluating. Corpus rules tagged with an incompatible actor are excluded from asserted citations and cannot drive blocking findings.

Available options:

advertiser,

manufacturer,

platform,

provider,

payer,

pharmacy,

HCP,

telehealth_provider,

adviser,

broker_dealer,

bank,

lender,

servicer,

debt_collector,

fund_manager,

payment_service_provider,

insurer

agentsRun

object[]

One record per financial-services specialist selected for this check, with how it finished. Absent on checks that ran no specialist and on cached results produced before this field existed.

Show child attributes

decisionReasons

enum<string>[]

Every rule that contributed to decision, in evaluation order. Present on checks that ran a financial-services specialist.

Why the decision is what it is. blocking_check: a blocking finding forced BLOCK. required_review_incomplete: a required specialist did not complete, so the check is HOLD. legal_context_overflow: the applicable rule set exceeded what one run can evaluate. flagged_check: a flagged finding produced HOLD.

Available options:

blocking_check,

required_review_incomplete,

legal_context_overflow,

flagged_check

_meta

object

Present only for test mode (zt_test_ keys)

Show child attributes

Overview

Compliance Checks

Video

Agents

Jobs & Reports

Check History

Provenance

Account & Usage

Billing

Webhooks

Corpus

Run compliance check

Authorizations

Headers

Body

Response