API overview
Firewatch exposes a versioned REST API and generates an OpenAPI document from the same contracts used by the application.
Discovery
Section titled “Discovery”The marketing domain publishes an RFC 9727 API catalog with links to the application API, OpenAPI description, and these human-readable docs.
The application OpenAPI document is available at:
https://app.onfirewatch.com/openapi/v1.jsonSelf-hosted installations expose the same document at
/openapi/v1.json on the API origin.
Authentication
Section titled “Authentication”Browser sessions use same-origin secure cookies and antiforgery protection. Organization API keys are intended for service integrations and alert ingestion. Keep API keys in secret storage and rotate them when their scope or owner changes.
Stability
Section titled “Stability”The /api/v1 prefix is the compatibility boundary. Additive fields may appear
within a version; breaking contract changes require a new API version.