API

Same permission, quote, and evidence rules as the UI. Calls authenticate with your workspace session, and spend still needs a bound approval.