Ironclad API

Name: Ironclad API API
Brand: Ironclad API
Availability: InStock

✓ Official Vendor SpecProductivityCollaborationapiKey3 EndpointsREST

For Agents

Authenticate against Ironclad with an API key, exchange it for an access token, and list or retrieve generic resource records that catalogue what the integration can act on.

Connect the Ironclad API to your agent

Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the Ironclad API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.

Install Jentic One Beta (Self-Hosted)

Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh

Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.

Capabilities

What an agent can do with Ironclad API API.

Exchange an Ironclad API key for a short-lived access token via POST /auth/token

List the generic resources available to an authenticated Ironclad integration

Retrieve metadata for a specific Ironclad resource by ID

Bootstrap an authenticated session before calling Ironclad's full workflow API

GET STARTED

Start building with Ironclad API API

Explore with Jentic

View OpenAPI Document

Use Cases

Patterns agents use Ironclad API API for, with concrete tasks.

★ Bootstrap Token Exchange for an Integration

Integration services exchange a static Ironclad API key for a short-lived access token by calling POST /auth/token at startup or when refreshing credentials. The returned token is then used by downstream calls in the broader Ironclad workflow API, reducing exposure of the underlying key to a single bootstrap step.

POST /auth/token with the X-API-Key header set and store the returned access token in memory for the lifetime of the integration session.

Resource Discovery Before Workflow Calls

Before issuing workflow operations, integrations call GET /resources to enumerate the resources available to them, then GET /resources/{id} for detail on a specific entry. This is useful when an integration manages multiple Ironclad workspaces or templates and needs to validate inputs against the live catalogue.

Call GET /resources to fetch the catalogue, then GET /resources/{id} for any entry the user references and confirm it exists before launching a workflow.

Healthcheck and Credential Validation

Operations teams use the auth and resources endpoints as a healthcheck for an Ironclad integration. A successful POST /auth/token followed by GET /resources confirms that credentials, network access, and permissions are intact, providing a fast signal in monitoring dashboards before any contract action runs.

Run POST /auth/token and GET /resources every five minutes from the monitoring service and alert if either returns a non-200 status.

Agent Bootstrap via Jentic

An AI assistant orchestrating contract workflows through Ironclad can use this spec to obtain an access token and validate resource identifiers before invoking the broader workflow API through Jentic. Jentic injects the X-API-Key from the vault and parses the auth response so the agent receives a ready-to-use token.

Use Jentic to search for 'get an Ironclad access token', load the POST /auth/token operation, and execute it to obtain a token before subsequent workflow calls.

Key Endpoints

3 endpoints — this ironclad api spec exposes the authentication and resource-listing primitives for ironclad's contract lifecycle management platform.

METHOD

PATH

DESCRIPTION

POST

/auth/token

Exchange an API key for an access token

GET

/resources

List available resources

GET

/resources/{id}

Retrieve metadata for a specific resource

POST

/auth/token

Exchange an API key for an access token

GET

/resources

List available resources

GET

/resources/{id}

Retrieve metadata for a specific resource

Why though Jentic?

Three things that make agents converge on Jentic-routed access.

Credential isolation

The Ironclad X-API-Key is stored encrypted in the Jentic vault and added to the request header at execution. The access token returned by /auth/token is held in the runtime only, never surfaced to the agent's prompt context.

Intent-based discovery

Agents search by intent (e.g. 'get an Ironclad access token') and Jentic returns the matching operation with its parameter schema, so bootstrap is a single search-load-execute step.

Time to first call

Direct Ironclad bootstrap: a few hours for token exchange and resource discovery. Through Jentic: under 15 minutes — search, load, execute.

Related APIs

Alternatives and complements available in the Jentic catalogue.

Complementary

Ironclad Public API

Full Ironclad workflow, approval, and signature surface across 41 endpoints.

Use the Ironclad Public API for actual contract operations after this spec has provided the access token.

Alternative

PandaDoc API

Document automation, e-signature, and CPQ workflows for sales-led deals.

Choose PandaDoc when the workflow is sales-led quoting and e-signature rather than legal-ops contract review.

Alternative

Juro API

Browser-native contract automation with templates and approvals.

Choose Juro for lightweight in-browser contract editing and standardised templates.

FAQs

Specific to using Ironclad API API through Jentic.

What authentication does this Ironclad API use?

This spec uses an X-API-Key header for authentication and exposes POST /auth/token to exchange the key for a short-lived access token. Through Jentic, the API key is stored in the encrypted vault and added to the request header at execution time.

How do I get an Ironclad access token?

Send POST /auth/token with the X-API-Key header set. The response returns the access token to attach to subsequent calls within its expiry window.

Can I list available resources on this Ironclad API?

Yes. GET /resources returns the resources accessible to the caller, and GET /resources/{id} returns the metadata for a specific resource by ID.

What are the rate limits for the Ironclad API?

This spec does not enforce explicit per-minute rate limits; throughput is governed by your Ironclad workspace plan. Avoid tight polling loops on /resources and cache responses where possible.

How do I bootstrap an Ironclad integration through Jentic?

Search Jentic for 'get an Ironclad access token', load the POST /auth/token operation, and execute it. Jentic injects the X-API-Key and returns the parsed token for the next call.

How does this spec relate to the Ironclad Public API?

This spec covers authentication and generic resource discovery; the Ironclad Public API spec (slug ironclad) covers the full set of 41 contract workflow, approval, and signature endpoints. Most production integrations use both.