API access: pull your security data into your own tools

Create a read-only API key and query findings, assets, devices, detections, alerts, offenses, score, compliance, and reports.

1. 1Included on Posture Growth+, SIEM Pro+, and Endpoint Protection Pro+. In any portal open Settings → API access → Create key. The key is shown once; copy it — only a hash is stored. Revoke any key instantly from the same card.
2. 2Send the key as a Bearer token: Authorization: Bearer cmk_… — every endpoint is GET and returns JSON. Full reference with examples at cybermatic.ai/docs/api.
3. 3List endpoints paginate with limit and cursor and accept since (ISO-8601) so you can poll for what's new — the pattern for ticketing and SIEM-forwarding integrations.
4. 4600 requests per hour per key. Each call updates the key's last-used time and count on the settings card, so unused keys are easy to spot and remove.

Tip: Use one key per integration (named for it) rather than sharing a key — revoking one integration then never breaks another.