One API core, every channel.
Identical calls produce identical results. The channel never changes the compliance outcome.
Four doors, one core.
Every channel calls the same versioned API, so outcomes never depend on the channel.
POST /v1/cases
Authorization: Bearer ••••
Content-Type: application/json
{ "subject": "SUB-88231", "type": "onboarding" }{
"case_id": "KYC-2026-0412",
"decision": "PASS",
"risk": "low",
"elapsed_ms": 1400,
"audit_hash": "sha256:9f2c…e41a"
}Pick the right door for each team.
Answer three questions. Most clients use more than one.
Answer all three questions to see a recommendation.
| Channel | Primary consumer | Latency | Effort | Security | Best for |
|---|---|---|---|---|---|
| REST | systems & middleware | lowest, direct calls | most control, most build | OAuth 2.0 / OIDC, mTLS | STP, deep embedding, volume |
| MCP | AI agents & copilots | adds protocol overhead | low, tools self-describe | inherits API entitlements | agentic workflows |
| iFrame | end users in client portals | interactive, UI-bound | front-end build only | token handoff, CSP | embedded UX, white-label |
Your systems, connected.
Decisions and evidence flow back into the systems your bankers already use.
- Loan origination systems
A new application triggers KYC by webhook; Athena's decision and evidence are written back to the loan file.
Connects viaWebhookRESTBatch - Core banking
Customer and account events start periodic and event-driven reviews; status syncs back automatically.
Connects viaEventsRESTBatch - CRM
Prefills onboarding data and keeps the customer record current with every review.
Connects viaWebhookREST - Onboarding portals
Embed Athena's checks with the iFrame or call the APIs from your own flow.
Connects viaiFrameREST - IDV / CIP providers
Keep your preferred provider. PerceptaCore orchestrates its output and adds the investigation.
Connects viaRESTSDK - Case management & ESB
Events flow through webhooks, batch and streaming; every action stays in one audit trail.
Connects viaWebhookBatchStreaming
Vendor-agnostic by design.
Swap data providers per category without touching client code.
Bring your own LLM.
Route each task to the model your policy and residency rules allow.
Built for developers.
OpenAPI contracts and a sandbox in 24 hours shorten integration.
Deploy your way.
Move from SaaS to your own perimeter without re-integration.
Enterprise security, isolation and audit.
Tenant isolation and a full audit trail answer your security review up front.
Identity & access
- Okta OAuth 2.0 / OIDC
- Mutual TLS
- Per-function entitlements
- Segregation of duties
- MCP tools inherit API permissions
Data isolation
- Postgres schema per tenant
- Row-level security
- Per-tenant KMS keys
- Isolated audit trail
- Local store option
Audit & reporting
- Every Athena action time-stamped
- Immutable versioned rule history
- Full trail by subject and case
- Scheduled and ad-hoc reports
Zero PII on-chain: only SHA-256 hashes reach the ledger.