Skip to main content
The HackGATE REST API gives you programmatic access to your sites, projects, analytics, and account settings. All endpoints follow consistent conventions described on this page.

​
Base URL

All API endpoints are served under this base URL, at paths matching /api/[resource].

​
Request and response format

All requests and responses use JSON. Set the Content-Type header on requests that include a body:

​
Authentication

Every request must include a valid Bearer token in the Authorization header:
Your token must carry an organization ID. Requests without a valid org context are rejected with 401. See Authentication for the two supported token types and how to obtain them.

​
Interactive explorer

You can explore and test all API endpoints interactively using the Swagger UI: https://api-admin.hackgate.io/swagger The explorer lets you authenticate with your token and send live requests directly from your browser.

​
HTTP status codes

​
Error response shape

Error responses include a title field with a human-readable message and a status field matching the HTTP status code:
Use the title field to diagnose validation errors and the status field to handle errors programmatically.

​
Explore the API

List sites

Retrieve all HackGATE sites in your organization.

List projects

Retrieve all projects in your organization.

Traffic analytics

Query traffic events and request timelines for your sites.

WAF analytics

Query Web Application Firewall events for your sites.

Account

Retrieve and manage your account details.

Billing

Access billing information for your organization.