Ingest a batch of iOS MetricKit telemetry payloads for the authenticated user.
Stores 1-8 raw MXMetricPayload/MXDiagnosticPayload jsonRepresentation() objects, attributed to the authenticated user. Delivery is at-least-once: redelivered payloads are deduped server-side by sha256(payload), so clients should treat a 200 as safe to clear their local spool. A credential with no user identity is rejected with 403. Crashes remain Sentry-authoritative; MXCrashDiagnostic payloads are stored as redundancy only. Rows are retained for 90 days.
AuthorizationBearer <rsk_live_*>Rensei API key presented as Authorization: Bearer rsk_live_. Required API-key scopes are recorded per operation in x-rensei-required-scopes.
application/json- body
payloads*array<>1 <= items <= 8Batch ingested.
application/json- response
accepted*numberduplicates*numbercurl -X POST 'https://app.rensei.ai/api/telemetry/ios' \ -H 'Content-Type: application/json' \ -d '{ "payloads": [ { "kind": "metric", "payload": { "property1": null, "property2": null }, "appVersion": "string", "osVersion": "string", "bundleId": "string" } ]}'{ "accepted": 0, "duplicates": 0}Read org security metrics (overview / health / timeline / posture).
Returns security dashboard metrics scoped to the authenticated org. `metricType` selects the projection: overview (all sections), health, timeline, or posture. `timeRange` ∈ 24h/7d/30d/90d. Bearer-reachable for human principals (user token or browser session); rsk_* API keys and BYOA OAuth-agent tokens are rejected 403.
List template catalogue entries.
Returns the template catalogue, optionally filtered by tracker, author, or category, with limit/offset pagination. Human principals only: a browser session or a WorkOS user-token bearer is accepted; rsk_* API keys and BYOA OAuth-agent tokens authenticate but are rejected 403.