API

Authentication

The API uses scoped tokens issued under Settings → API tokens. Tokens are tenant-scoped and read-only by default.

Endpoints

GET  /api/v1/findings?asset_id=...&state=open
GET  /api/v1/assets
GET  /api/v1/checks/{id}
GET  /api/v1/coverage?framework=ts50701

Limits

Rate limit

60 requests per minute per token.

Page size

Default 50, max 200.

Pagination

Cursor-based via the next_cursor field.