close
DocsQuickstart

Quickstart

Get API governance running in 60 seconds. No account required.

1

Install the CLI

npx delimit-cli setup

This creates a .delimit/ directory with default policies and detects your OpenAPI specs automatically.

Delimit initialized.
Found: api/openapi.yaml
Policy: default (balanced)
Created: .delimit/policies.yml
2

Lint your spec for breaking changes

npx delimit-cli lint api/openapi.yaml

Compares the current spec against its last known version. Reports breaking changes with severity and migration guidance.

BREAKING: removed field `user.email` from GET /users response
WARNING: added required param `api_key` to POST /auth
OK: 14 endpoints checked, 2 issues found
3

Diff two spec versions

npx delimit-cli diff old.yaml new.yaml

Pure structural diff. Lists every addition, removal, and modification across endpoints, schemas, and parameters.

Semver: MAJOR
Changes: 3 breaking, 7 non-breaking
+ POST /v2/webhooks (added)
- DELETE /users/{id} (removed)
~ GET /orders response schema changed
4

Gate any AI-assisted CLI with a signed attestation

New in v4.3
delimit wrap -- claude -p "add tests for payments"

Works with any AI-assisted CLI — claude, cursor, aider, codex, gemini, or any piped producer. Wrap snapshots the git diff before and after, runs lint plus tests, and emits a signed replayable attestation you can hand to an auditor or pipe into CI.

delimit wrap — att_7d556843c84fb881
wrapped exit: 0 mode: advisory tier: free
✓ test_smoke:npm test
attestation: ~/.delimit/attestations/att_7d556843c84fb881.json
replay: https://delimit.ai/att/att_7d556843c84fb881

Need to block CI on policy violations? Add --enforce. Need a kill switch on a runaway invocation? Add --max-time 60 and the wrap SIGKILLs the wrapped command after 60 seconds, emits a liability_incident attestation, and prints a cross-model handoff command.

5

Render a public trust page from accumulated attestations

delimit trust-page -o ./trust && delimit ai-sbom -o ./ai-sbom.json

After a handful of wraps, render them all into a public trust page (static HTML plus JSON Feed 1.1, no framework, offline-renderable) plus a CycloneDX 1.6 bill of materials with AI-specific fields. Deploy the output anywhere. Hand the SBOM to enterprise procurement.

Framework quickstarts

Copy a directory. Push. Governance runs automatically. Each quickstart is a minimal API with the same five endpoints, a valid OpenAPI 3.0 spec, and the Delimit GitHub Action wired up.

View all quickstarts on GitHub