DOCS · SDK

SDK

SDKs are convenience layers for generating tool specs and verifying signatures. The stable integration contract remains OpenAPI plus HMAC.

Available SDKs

PHP / PHP 7

Annotation or builder-based tool specs, tool call verification, callback verification, and authorization probe helpers.

Node

TypeScript-friendly builders for tool specs and HMAC verification helpers.

Python

Lightweight helpers for Python business services exposing OpenAPI tool specs.

Any language

Publish OpenAPI with x-ai-* fields and implement HMAC verification. No official SDK is required.

Node example

JSTool spec builder
import { buildOpenApiSpec, param, tool } from '@bailing-ai/connect';

export default buildOpenApiSpec({
  title: 'CRM Tools',
  version: '1.0.0',
  authzProbe: { method: 'POST', path: '/.well-known/bailing/authz-probe' },
  tools: [
    tool({
      name: 'member_query',
      method: 'GET',
      path: '/api/members/{id}',
      description: 'Query member profile',
      scope: 'member.read',
      requiresSubject: true,
      params: [param('id', { in: 'path', required: true, description: 'Member ID' })],
    }),
  ],
});

Verification rule

Every write-capable business tool should verify the hub signature, timestamp freshness, tool name, job id, and the on-behalf-of subject before applying business authorization.