Documentation

API Reference

RESTful API for programmatic access to Tebrim — agents, policies, threats, compliance, and audit logs.

Authentication

All API requests must include your API key in the Authorization header:

Authorization: Bearer YOUR_API_KEY

Generate API keys from Workspace → API Keys. Keys are scoped to your workspace and support fine-grained permission scopes.

Base URL: https://api.tebrim.com

Endpoints

GET/v1/agentsList all discovered AI agents in the workspace

GET/v1/agents/:idGet full details for a specific agent

POST/v1/discovery/scanTrigger an on-demand discovery scan

GET/v1/discovery/scan/statusGet status of the most recent discovery scan

GET/v1/policiesList all active security policies

POST/v1/policiesCreate a new security policy

PUT/v1/policies/:idUpdate an existing policy

DELETE/v1/policies/:idDelete a policy

GET/v1/threatsRetrieve active threat alerts

POST/v1/threats/:id/resolveMark a threat alert as resolved

GET/v1/compliance/scoreGet the current compliance posture score

GET/v1/compliance/reportGenerate a compliance report (SOC 2, ISO 27001, NIST)

GET/v1/audit-logsQuery audit trail events with filters

GET/v1/membersList workspace members and roles

POST/v1/members/inviteInvite a user to the workspace

Rate Limits

API requests are rate-limited per workspace: 1,000 requests/minute on Starter, 5,000/minute on Growth, and custom limits on Enterprise. Rate limit headers are included in all responses: X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset.