Skip to main content

Glossary

Feature and Support Matrix

What Verdictan supports, and where each piece is documented. Check here before you build on a feature, especially which request families your policies actually cover.

Customer surfaces​

InterfaceUse it forKeep in mind
ConsoleInteractive work: organizations, agents, gateways, identity, evidence, billingSign in through the Console. Never copy browser credentials into API clients.
verdictan CLIRunning gateways locally and scripting control-plane workCheck each command's authentication, region, and confirmation flags.
Public API v1Programmatic control and audit/v1/openapi.json is the authority for schemas and permissions.
OpenAI-compatible SDKsStandard SDKs pointed at the gatewayPolicy coverage depends on the request family.

Product feature coverage​

For API automation, start with the API Overview and your region's /v1/openapi.json.

TaskConsole guideCLI guide
AgentsAgentsverdictan agent
Gateway runtimeGateway Fleetverdictan gateway
Runtime configurationConfigurationsPolicy Lifecycle
IAM, members, teams, and rolesIdentity and AccessIAM, Members, Teams, and Roles
SSO and SCIMSSO and SCIMControl manifests export the organization's authentication policy, but not connections or SCIM.
OAuth clientsOAuth ClientsNone
MFA and passkeysMFA and PasskeysNone
Events and escalationsOverview, agent and gateway monitoring, and Inboxverdictan events and verdictan escalation
Trail evidenceTrail and Audit Evidenceverdictan trail
HistoryConsole Historyverdictan history
Usage costs and budgetsUsage Costs and BudgetsSpend, Budgets, and API Tokens
Resource tagsResource TagsControl manifests support agent tags. There is no generic verdictan tag command.
Context FabricAgent and gateway detail viewsGateway and config workflows
SecretsConsole SecretsManage Secrets and Credentials
Region discoveryConsole locality fieldsverdictan regions

Gateway request families​

FamilyRoutePolicy chain
Chat CompletionsPOST /v1/chat/completionsInput and output, JSON or SSE
ResponsesPOST /v1/responsesInput and output, JSON or SSE
MessagesPOST /v1/messagesInput, tool, output, and audit stages, on an Anthropic-shaped body
WebSocketGET /v1/chat/completions/ws, GET /v1/responses/wsEach complete text frame, both directions. Binary and malformed frames are rejected, and redact verdicts don't rewrite forwarded frames.
EmbeddingsPOST /v1/embeddingsNot run. Authentication, provider access, and budget rules apply.
Audio transcriptionPOST /v1/audio/transcriptionsNot run. Authentication, provider access, and budget rules apply.
Audio speechPOST /v1/audio/speechNot run. Authentication, provider access, and budget rules apply.
ModerationPOST /v1/moderationsNot run. Authentication and provider access apply.
ModelsGET /v1/models, GET /v1/models/:model_idNot applicable: model discovery
Published-host MCPGET /mcp, POST /mcpMCP tool calls, within the documented limits

Don't assume two routes get the same policy coverage because their bodies look alike. Runtime Request Families has the details for each family.

Documented provider guides​

Each guide lists the credentials, endpoint, and request types for that provider:

AIML API · Alibaba Qwen · Amazon SageMaker · Azure OpenAI · Cerebras · Cloudera AI Inference · Cloudflare AI Gateway · Cloudflare Workers AI · Databricks Model Serving · DeepSeek · Fireworks AI · GitHub Models · Google AI Studio · Google Vertex AI · Groq · Hugging Face Inference · Mistral AI · OpenAI · OpenRouter · Perplexity · QuiverAI · Replicate · SambaNova · Together AI · Vercel AI Gateway · Voyage AI · xAI

Test with the exact model, request type, and streaming mode your application uses. A working text reply doesn't prove audio, tools, or structured output.

SDK and framework guides​

Standard OpenAI-compatible clients:

Frameworks and client applications, using the same request families:

Verify a claimed capability​

Before you build on a feature:

  1. Find it in this matrix and in its guide.
  2. Confirm the operation is in /v1/openapi.json or verdictan --help.
  3. Check the environment and credentials.
  4. Run one success case and one deny or failure case.
  5. Check the resulting state and evidence where that feature records them.

If an operation isn't in its guide or in the public discovery document, don't build production work on it.

Next steps​