# API overview

> Discover and use Firewatch’s versioned REST API.

This is the machine-readable version of this Firewatch documentation page.

Firewatch exposes a versioned REST API and generates an OpenAPI document from
the same contracts used by the application.

## Discovery

The marketing domain publishes an
[RFC 9727 API catalog](/.well-known/api-catalog) with links to the application
API, OpenAPI description, and these human-readable docs.

The application OpenAPI document is available at:

```text
https://app.onfirewatch.com/openapi/v1.json
```

Self-hosted installations expose the same document at
`/openapi/v1.json` on the API origin.

## Authentication

Browser sessions use same-origin secure cookies and antiforgery protection.
Organization API keys are intended for service integrations and alert
ingestion. Keep API keys in secret storage and rotate them when their scope or
owner changes.

## Stability

The `/api/v1` prefix is the compatibility boundary. Additive fields may appear
within a version; breaking contract changes require a new API version.