Alerts

List Alert Rules

GET /v1/guard/alert-rules

Create an Alert Rule

POST /v1/guard/alert-rules

{
  "name": "Excessive Failed Logins",
  "condition": {
    "event": "access.user.login",
    "outcome": "failure",
    "threshold": 10,
    "window_seconds": 300,
    "group_by": "actor_id"
  },
  "severity": "high",
  "channels": ["slack_security"]
}

Create from Template

POST /v1/guard/alert-rules/from-template

{ "template": "impossible_travel" }

Available templates: impossible_travel, mass_download, privilege_escalation, policy_disabled, api_key_mass_creation.

List Active Alerts

GET /v1/guard/alerts Query Parameters

Parameter	Type	Description
`status`	enum	`triggered`, `acknowledged`, `investigating`, `resolved`, `false_positive`
`severity`	enum	`critical`, `high`, `medium`, `low`
`sort`	string	e.g. `triggered_at:desc`

Update Alert Status

PATCH /v1/guard/alerts/{id}

{
  "status": "investigating",
  "assignee_id": "usr_01HXYZ5678",
  "note": "Reviewing login logs."
}

List Notification Channels

GET /v1/guard/notification-channels

Create a Notification Channel

POST /v1/guard/notification-channels

{
  "name": "slack_security",
  "type": "slack",
  "config": { "webhook_url": "https://hooks.slack.com/...", "channel": "#security" },
  "min_severity": "medium"
}

Supported types: slack, email, pagerduty, webhook, ms_teams.

API Overview

Office

Access

Sales

Careers

Project

Guard

Webhooks

List Alert Rules

Create an Alert Rule

Create from Template

List Active Alerts

Update Alert Status

List Notification Channels

Create a Notification Channel

​List Alert Rules

​Create an Alert Rule

​Create from Template

​List Active Alerts

​Update Alert Status

​List Notification Channels

​Create a Notification Channel

List Alert Rules

Create an Alert Rule

Create from Template

List Active Alerts

Update Alert Status

List Notification Channels

Create a Notification Channel