Rensei docs
API ReferenceSecurity

Read org security metrics (overview / health / timeline / posture).

Returns security dashboard metrics scoped to the authenticated org. `metricType` selects the projection: overview (all sections), health, timeline, or posture. `timeRange` ∈ 24h/7d/30d/90d. Bearer-reachable for human principals (user token or browser session); rsk_* API keys and BYOA OAuth-agent tokens are rejected 403.

GET
/api/security/metrics

Authorization

headerAuthorizationBearer <rsk_live_*>

Rensei API key presented as Authorization: Bearer rsk_live_. Required API-key scopes are recorded per operation in x-rensei-required-scopes.

Query Parameters

metricType?string

Which projection to return (default overview).

Value in"overview""health""timeline""posture"
timeRange?string

Aggregation window (default 30d).

Value in"24h""7d""30d""90d"
limit?number

Timeline row cap (max 100).

Response Body

Security metrics; sections present depend on metricType.

application/json
  1. response
metrics?
health?
timeline?array<>
posture?
actorNames?
Example Request
curl -X GET 'https://app.rensei.ai/api/security/metrics'
Example Response
{  "metrics": {    "property1": null,    "property2": null  },  "health": {    "property1": null,    "property2": null  },  "timeline": [    {      "property1": null,      "property2": null    }  ],  "posture": {    "property1": null,    "property2": null  },  "actorNames": {    "property1": "string",    "property2": "string"  }}

Real-time fleet statistics (org-scoped)

Returns live worker fleet and session queue metrics for the active org. Requires a session cookie or `rsk_` API key - despite the `/api/public` prefix, this endpoint is not anonymous.

Ingest a batch of iOS MetricKit telemetry payloads for the authenticated user.

Stores 1-8 raw MXMetricPayload/MXDiagnosticPayload jsonRepresentation() objects, attributed to the authenticated user. Delivery is at-least-once: redelivered payloads are deduped server-side by sha256(payload), so clients should treat a 200 as safe to clear their local spool. A credential with no user identity is rejected with 403. Crashes remain Sentry-authoritative; MXCrashDiagnostic payloads are stored as redundancy only. Rows are retained for 90 days.