One API check before an automated transaction leaves your agent.

XGuard validates HTTPS/public-network targeting, request freshness, amount shape and idempotency, then records the idempotency key to reject replays. One successful assurance consumes one credit.

Buy 5,000 checks API example

After payment

Checkout is handled by Lemon Squeezy.

Your receipt contains a unique license key.

XGuard provisions 5,000 credits automatically.

Use that key as the Bearer token on /v1/assure.

Billable assurance call

Each successful new idempotency key consumes exactly one credit. Reusing the same key returns replay_detected without a second debit.

curl -X POST https://hooks.xguardgate.com/v1/assure \
  -H "Authorization: Bearer YOUR_LICENSE_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "action":"purchase",
    "target":"https://merchant.example/pay",
    "method":"POST",
    "amount":{"value":49.99,"currency":"USD"},
    "idempotency_key":"order-2026-000123",
    "expires_at":"2026-08-25T13:30:00Z"
  }'

{
  "decision":"allow",
  "assurance_id":"xga_...",
  "credits_remaining":4999,
  "consumed":1
}

Check your balance

Paste your license key. This page forwards it only to the XGuard credit ledger for the balance lookup and does not store it.

Full refunds revoke remaining credits automatically when the refund webhook is received; partial refunds reduce the remaining allowance proportionally.