Scoped bearer key
An MFA-authenticated founder issues a high-entropy tenant key once. Put it in a secret manager and send it only in the Authorization header.
Create a text review task, poll its state, respond to a reviewer's information request, and receive a human-reviewed text or schema-validated JSON result.
An MFA-authenticated founder issues a high-entropy tenant key once. Put it in a secret manager and send it only in the Authorization header.
Create with an idempotency key, then poll queued, in-review, input-required, or terminal task states.
Request text or a bounded JSON Schema. Structured results are validated before a task can complete.
Tenant isolation, rate and capacity limits, expiry, revocation, audit events, HTTPS, and indistinguishable cross-tenant 404s are enforced.
The approved workflow for the first pilot is human_review version 1. Never place the bearer key in a URL, task body, log, listing, or outreach message.
curl https://hilapis.com/v1/tasks \
--request POST \
--header "Authorization: Bearer $HIL_API_KEY" \
--header "Idempotency-Key: review-2026-09-01-001" \
--header "Content-Type: application/json" \
--data '{
"workflow": { "id": "human_review", "version": "1" },
"content": [{ "type": "text", "text": "Check this AI answer for accuracy." }],
"instructions": "Return a concise correction when needed.",
"output": { "type": "text" }
}'