GuardScale API
Console REST endpoints require a signed-in session and use the active organization. Enrollment credentials are exclusively for agent ingestion, not console access.
| Method | Endpoint | Purpose |
|---|---|---|
| GET | /api/v1/nodes | List servers |
| GET | /api/v1/nodes/{serverId} | Server, recent activity and incidents |
| GET | /api/v1/incidents | List incidents |
| GET | /api/v1/incidents/{incidentId} | Incident details |
| POST | /api/v1/agents/heartbeat | Agent registration / heartbeat |
| POST | /api/v1/agents/logs | Agent log batch, maximum 50 entries |
| POST | /api/v1/agents/events | Agent event ingestion |
Example in your signed-in browser
fetch('/api/v1/nodes').then(r => r.json()).then(console.log)Server IDs are organization-scoped. Requests for another organization’s server return not found. For external read-only integrations, use the MCP bearer-token connection.
MCP setup and scoped token →