>_

SpendSignoff documentation

The always-on operator for your ad accounts. Read and draft from your AI client — approve before anything goes live.

Reference

REST API

The SpendSignoff REST API is versioned under /v1 and split into three namespaces by trust boundary: internal (service-to-service), app (the dashboard), and webhooks (inbound events). The MCP server and the dashboard both ride this same core.

Authentication

Bearer tokens, scoped per namespace.

App endpoints use a session-derived bearer token. There is no REST endpoint that applies a change without going through the two-step approve flow — approve exists, but it enforces the same envelope and audit rules as the UI.

example request

curl https://api.spendsignoff.com/v1/app/drafts \
  -H "Authorization: Bearer $ADSRUNTIME_TOKEN"

Internal/v1/internal

Service-to-service calls behind the SpendSignoff core. Not exposed to clients.

POST/v1/internal/loop/tick
Trigger an autonomy-loop pass for an account.
POST/v1/internal/envelope/check
Evaluate a draft against the 24h envelope ceiling.
GET/v1/internal/health
Liveness and dependency probe.

App/v1/app

Powers the dashboard: accounts, drafts, approvals, audit. Session-authenticated.

GET/v1/app/drafts
List drafts in the approval queue.
POST/v1/app/drafts/{id}/approve
Two-step approve — applies the diff and writes audit.
POST/v1/app/drafts/{id}/reject
Discard a draft.
POST/v1/app/changes/{id}/rollback
Revert an applied change to its before-state.
GET/v1/app/audit
Read the signed audit log.

Webhooks/v1/webhooks

Inbound events from billing and ad platforms. Signature-verified.

POST/v1/webhooks/stripe
Subscription lifecycle → plan state.
POST/v1/webhooks/platform
Ad-platform change & disapproval notifications.

No REST path bypasses approval

Every spend-affecting mutation goes through /v1/app/drafts/{id}/approve, which enforces the 24h envelope and writes a signed audit entry. There is no “apply now” endpoint and no API token that can spend without a human-confirmed approval.
Your AI can read and draft — it can never spend without your approval.

Next

Safety

Draft-before-live, propose-only, the daily envelope, and the circuit breaker.

    REST API — SpendSignoff Docs