API Authentication

Guardian’s public API is read-only, for integrating your monitored agents and alerts with other tools. Everything the dashboard itself uses internally is a separate, unstable surface — this is the only one meant for third-party use.

Get an API key

Generate one from Settings → API Keys in the dashboard.

Make a request

Send it as a bearer token:

curl https://guardian.gtarsenals.com/v1/agents \
  -H "Authorization: Bearer gtg_live_..."

Keys are scoped to your tenant — a request only ever returns your own agents and alerts.

Errors

A request with a missing, invalid, or revoked key gets a 401:

{ "error": "invalid or revoked API key" }

See Rate Limits for 429 responses.