API, webhooks and integrations

The public REST API covers the work you'd otherwise do by hand:

• sync your AI inventory from your own registry;
• classify systems and read their obligations;
• update control status and upload evidence from pipelines;
• report incidents and findings from your own tooling;
• run red-team tests and read the results;
• ask the compliance gate whether a system is ready to ship, and fail the build if not.

Webhooks tell your systems when things change, such as a new finding, an incident or a change of risk tier.

Get started

1. 1
   Sign in and open Developers in the sidebar.
2. 2
   Create an API key with the lowest role that does the job.
3. 3
   Follow the quickstart in the developer documentation.