GET /health

Returns the current status of the SENTINEL API. No authentication required.

Example Request

curl https://api.starksentinel.com/health

Example Response

{
  "status": "healthy",
  "version": "1.1.0",
  "timestamp": "2026-04-02T12:00:00.000Z"
}

Response Fields

POST /v1/prove

Generates a STARK proof attesting that a set of behavioral observations stays within defined EWMA control limits. The proof is zero-knowledge: raw observations are used to compute the EWMA in-memory, then discarded. Only public inputs (observation count, final EWMA, control limits, pass/fail) are included in the proof envelope.

Request Body

Example Request

# Generate a STARK proof for 8 behavioral observations
curl -X POST https://api.starksentinel.com/v1/prove \
  -H "X-API-Key: $SENTINEL_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "observations": [95, 98, 92, 97, 100, 94, 96, 99],
    "baseline_mean": 96,
    "ucl": 110,
    "lcl": 80
  }'

Example Response

{
  "public_inputs": {
    "num_observations": 8,
    "baseline_mean": 96,
    "final_ewma": 95,
    "ucl": 110,
    "lcl": 80,
    "within_limits": true
  },
  "proof_bytes": "base64-encoded-stark-proof...",
  "metadata": {
    "generation_time_ms": 9,
    "proof_size_bytes": 6761,
    "security_level": 96
  }
}

Response Fields

Privacy Guarantee

Individual observation values are never included in the response. The proof attests to the statistical properties (EWMA within control limits) without revealing the underlying data. This is the Prove-Don't-Share architecture.

POST /v1/verify

Verifies a previously generated STARK proof. Verification confirms that the proof was correctly generated and that the public inputs are authentic. Verification is always free and does not count against your monthly proof limit.

Request Body

Example Request

# Verify a previously generated proof
curl -X POST https://api.starksentinel.com/v1/verify \
  -H "X-API-Key: $SENTINEL_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "proof_bytes": "base64-encoded-stark-proof...",
    "public_inputs": {
      "num_observations": 8,
      "baseline_mean": 96,
      "final_ewma": 95,
      "ucl": 110,
      "lcl": 80,
      "within_limits": true
    }
  }'

Example Response

{
  "valid": true,
  "public_inputs": {
    "num_observations": 8,
    "baseline_mean": 96,
    "final_ewma": 95,
    "ucl": 110,
    "lcl": 80,
    "within_limits": true
  },
  "metadata": {
    "verification_time_ms": 2
  }
}

Response Fields

Client-Side Verification

For zero-trust verification, use the open-source WASM verifier. It runs entirely client-side — no network calls, no trust in SENTINEL required. See the Quickstart Guide for setup instructions.