Trooth

EU AI Act Automation API

Integrate Trooth's continuous EU AI Act monitoring directly into your stack.

Quick start

# Signed in to trooth.co, from your own page or a fetch:
# this app forwards the call with your session attached.
curl -X GET https://trooth.co/api/eu/systems \
  -H "Accept: application/json" \
  --cookie "trooth_session=<your session cookie>"

Every request is tenant-scoped. Calls through trooth.co/api/eu/* are authenticated by the httpOnly session cookie, which this app exchanges for a bearer token server-side, so no key ever reaches the browser. The placeholder above is a placeholder: substitute your own session, and never paste a real cookie into a shared terminal or a bug report. The complete endpoint reference is issued with your API key.

What you can automate

Risk classification

Submit your AI system details and receive a risk classification plus the applicable obligations.

Article 50 disclosures

Auto-generate the Article 50 transparency disclosure for your declared system.

Compliance status

Retrieve current compliance status, obligations met and unmet, and last-update timestamps.

Auto-update subscription

Register for auto-updates so Trooth applies regulatory changes to your documents.

Regulatory change feed

Pull recent regulatory changes aggregated across Trooth's monitored sources.

Webhooks

Configure a webhook endpoint to receive regulatory change events as they happen.

Multi-source regulatory monitoring

Trooth aggregates EU AI Act regulatory changes from multiple independent authoritative sources, normalizes them into a single event schema, and validates every event through multiple accuracy assurance layers before it reaches your webhook. The full source list and the change classifier are available to customers on request.

Rate limits

One ceiling applies to every caller. Trooth is free, there are no plans to pick between, and nothing about an account buys a larger allowance. Requests are counted for each IP address across two fixed windows that run at the same time, one by the minute and one by the hour. There is no yearly call allowance.

Per minute
5 requests
Public scan route, each IP address
Per hour
20 requests
Public scan route, each IP address

Over either window the answer is 429 with a JSON message. There is no retry-after header, so pause briefly and send one retry. The classification and Article 50 endpoints run behind your session rather than behind a published quota, so no separate call allowance is advertised for them.

What this API does (and doesn't do)

Trooth fully automates today:

Risk classification (the guided wizard maps your product to its applicable risk classification). Article 50 transparency disclosures (we generate and host the mandatory notice). Continuous multi-source regulatory monitoring. Auto-apply of downstream obligations when the law changes.

Article 48 (CE Marking): by law, only you can sign it.

The CE mark is a legal declaration that you, the provider, have completed conformity assessment. No SaaS tool can sign it on your behalf. That would be forgery. Trooth does the next best thing: we pre-fill your conformity checklist, flag gaps, and auto-generate the supporting documentation so that when you sign, you sign with confidence.

Article 49 (EU Database registration): the API doesn't exist yet, and that's your advantage.

The European AI Office has not published a programmatic registration endpoint. Everyone (every competitor, every consultancy) is stuck with manual form submission. The moment an API surfaces, Trooth will integrate it. Until then, we export a pre-filled JSON payload that matches the anticipated schema so you're one click away from submission on Day 1.

Annex IV (Full technical documentation): Beta Starter.

Annex IV requires extensive technical documentation for high-risk systems: training data provenance, model architecture, bias testing, cybersecurity measures, and more. Trooth's Annex IV module is in private beta and is not generally available. If you are classified High-Risk today, write to support@trooth.co for access.

For novel interpretation questions ("does my system count as high-risk under the new omnibus guidance?"), consult licensed counsel. Trooth provides infrastructure, not legal advice, but we make compliance less painful and keep you ahead of the curve.

Start using the API in 5 minutes

Sign up free. Mint your API key in the dashboard. Start scanning.

Get an API key

Use of the Trooth API is subject to the Terms of Service.