curl "https://aport.io/api/verify/ap_xxx"

# Response includes:
# - Passport metadata
# - MCP configuration
# - Policy evaluation

const { requirePolicy } = require('@aporthq/middleware-express');

app.post('/api/refunds',
  requirePolicy("finance.payment.refund.v1", "ap_xxx"),
  (req, res) => {
    res.json({ success: true });
  }
);

// Check before reading any file
const decision = await aport.verify("data.file.read.v1", {
  agent_id: "ap_xxx",
  file_path: "/tmp/report.txt"
});

if (!decision.allow) {
  throw new Error("Access denied");
}

// Safe to read - policy passed
const content = await fs.readFile(file_path);

// Check before writing any file
const decision = await aport.verify("data.file.write.v1", {
  agent_id: "ap_xxx",
  file_path: "/tmp/output.json",
  content_size_mb: 2.5
});

if (!decision.allow) {
  throw new Error(decision.reasons[0].message);
}

// Safe to write - policy passed
await fs.writeFile(file_path, content);