Base URL and authentication
Every request is authenticated with a bearer token. Create a token in Settings, then API Keys, and send it in theAuthorization header:
instance variable to your subdomain to send live requests.
Copy your token immediately when created — it’s only shown once.
Tenant and workspace scope
Most endpoints are scoped to a tenant and a workspace, so their paths include both identifiers:tenant_id— your organization.workspace_id— a workspace within that organization.
The inventory graph
The Platform models your AI estate as a graph. Each entity is a node, and the API exposes the edges between them so you can walk from one to the next — for example, from an agent to the models it calls, or from a model to the MCP servers it reaches. These entity types participate in the graph:Traverse relationships with edges
Each graph entity exposes an edge endpoint that returns its related entities:{id}— the entity you’re starting from.{edge}— the relationship to follow.
{id}/{edge} pattern is available on agents, models, tools, MCP servers, assets, and locations, so you can traverse the full graph one hop at a time.
What you can query
The endpoints are grouped by resource in the sidebar. The main areas are:- Inventory — agents, models, tools, MCP servers, assets, and locations, plus their edges.
- Findings — issues, fine-grained issues, and issue histograms.
- Rules — the rules that produce findings, including static and external rules.
- Runtime — LLM interactions captured at runtime and their dashboards.
- Scans — scan runs and their results.