Keep this key private. It is shown once on this page; the server stores only its hash.
dn_… (from the payment response)
curl -X POST https://attest.rta.lat/deny -H 'content-type: application/json' -H 'X-API-Key: dn_your_key' -d '{"reason":"payee not in allowlist","policy_id":"E03-allowlist",
"task_id":"task_1","artifact_hash":"sha256:9c1e","actor":"agent:demo"}'
curl 'https://attest.rta.lat/deny?limit=100'
Reading is public; writing requires the key. Each key is bound to its plan: trial — 100 records / 7 days; deny-30d — unlimited / 30 days.
from attest.deny import read, verify_log print(verify_log(read()))