Developer resources

GitHub

Open-source SDKs and tools for querying Carver's regulatory feeds and building on the platform.

Documentation

API reference, guides, and quickstarts for integrating RegWatch into your workflows.

RegTeaming

Adversarial regulatory testing methodology for AI systems, sponsored by Carver.

Demos playlist

Walkthroughs of the SDK, RegWatch integration, and RegTeaming method, on YouTube.

Support

FAQs

Can't find your answer here? Browse our full knowledge base.
Q1. What is Carver's API for?
Carver is the data layer of Carver's Regulatory OS. The API gives you programmatic access to regulatory signals, statutes, risk reports, and context data, so you can pull structured regulatory data into your apps, dashboards, or agents instead of relying on the RegWatch UI.
Q2. How do I authenticate with the API?
Carver offers two authentication modes: V1 uses an X-API-Key header and is built for server-to-server integrations; V2 uses Firebase JWT tokens and is built for user-facing applications needing per-user access control. Pick based on whether you're building a backend integration, a user-facing app, or an agent that needs its own credentials.
Q3. Is there a rate limit?
We're not currently enforcing rate limits, but reserve the right to introduce them as usage scales. If you're using the Python SDK, rate-limit handling and retries are built in, so you won't need to change anything on your end if limits are introduced later.
Q4. Is there an official SDK?

Yes, see the GitHub and Documentation links above for the Python SDK, which includes a Query Engine for pulling regulatory signals and an Annotations module for structuring/labeling data, so you don't have to hand-roll HTTP calls against the raw API.

Q5. How fresh is the data I get through the API?

New regulatory content typically shows up within 24 hours of publication by the source institution, so API responses reflect near-real-time regulatory activity, not a stale batch feed.

Q6. What can I actually query just alerts, or full regulatory content?

You can pull Signals (scored regulatory changes), Statutes (the underlying laws/guidance library), Risk Intelligence Reports (AI-generated PDF outlooks), and — for agent builders — agent-specific evals and RegTeaming results, all linked back to their source statute so you can trace any output to the underlying regulation.

Q7. How does the Regulatory Context Graph (RCG) fit in for developers?

RCG exposes regulatory context as a graph specifically for AI agents — at dev time (grounding agent design and decisions in current regulation) and at run time (agents checking live regulatory context before acting). It's built for agentic systems that need to stay compliance-aware continuously, not for static dashboards on a refresh schedule.

Q8. How accurate are the AI-generated summaries and scores?

Summaries are generated from original source text, and relevance scores (0–10) depend on the Context you configure (your Business Profile + Regulatory Focus Areas) — better-defined context means sharper scoring. Carver recommends verifying critical regulatory details against the original source before acting on them.

Q9. Is there a video walkthrough of the API and SDK in action?

Yes, check out our demo playlist covering authentication setup, sample Signals/Statutes queries, Python SDK usage, and the RegTeaming method end-to-end. It's the fastest way to see the API and SDK working in a real integration before you start writing code.

Q10. What is RegTeaming, and how is it different from AI safety red-teaming?

RegTeaming is an adversarial testing methodology, sponsored and maintained by Carver, that checks whether an AI system can be pushed into unlawful, prohibited, or regulatorily indefensible behavior. Red teams test whether a system can be made unsafe; RegTeams test whether it can be made non-compliant. It's not a replacement for safety red-teaming — it's the regulatory layer most eval stacks don't cover yet, since regulatory failures emerge across a full trajectory: what the agent says, which tools it uses, which disclosures it makes, when it escalates, what action it ultimately takes, and what evidence gets preserved.

Q11. How does RegTeaming turn regulation into actual test cases and evals?

RegTeaming converts changing regulatory obligations — sourced from the same regulatory graph behind RegWatch and RCG into adversarial scenarios, expected behavior, evidence requirements, and repeatable evals. A rule change becomes a concrete eval against your agent's behavior instead of a line in a policy document. The methodology follows an eight-principle manifesto (RegTeaming Manifesto v1): test behavior not declarations, test control effectiveness, preserve evidence, update continuously, report scope honestly, among others.

Q12. How are the evals themselves generated?

Evals are generated directly from the underlying legal instruments — bills, directives, acts, and similar sources — by breaking them down into their component clauses, obligations, and other structural elements. Each of those elements can then be turned into a concrete scenario an agent is tested against, rather than the eval being hand-written from a summary of the law.

Q13. Can I run evals against my own agents using RegTeaming, and where do I start?

Yes, RegTeaming is built to be used and extended by teams building AI assurance, legal, or risk tooling. The manifesto and developer guide are published at regteaming.com, along with the scenario/evidence framework you can adapt to your own agent trajectories and compliance obligations.

Need help wiring this into your stack?

Talk to the team about API access, integration patterns, or a live walkthrough of RegWatch and RegTeaming.

Learn More
dev@carver:~