Rate limits
600 requests per minute per tenant. Aggregate endpoints are limited to 60 requests per minute.
Support / Developers
Connect approved systems to scoped events, device health, and immutable access records. Every token inherits the user, purpose, and geography behind it.
Version 2026-07
The API uses JSON over HTTPS and OAuth 2.0 client credentials. Production access requires an approved integration, least-privilege scopes, and a named customer administrator.
curl https://api.civicguard.observer/v1/events \
-H "Authorization: Bearer $TOKEN" \
-H "X-Civic-Purpose: OVERSIGHT-24" \
-G \
--data-urlencode "from=2026-09-19T00:00:00Z" \
--data-urlencode "device_group=official-fleet"
{
"data": [{
"event_id": "evt_7M4…",
"captured_at": "2026-09-19T14:32:18Z",
"fleet_class": "municipal",
"retention_expires_at": "2026-10-03T14:32:18Z"
}],
"next_cursor": "eyJvZmZzZXQi…"
}Core endpoints
| Method | Endpoint | Purpose | Scope |
|---|---|---|---|
| GET | /v1/events | Retrieve approved event records | events:read |
| GET | /v1/metrics/corridors | Retrieve aggregate counts | metrics:read |
| GET | /v1/devices | List devices and health | devices:read |
| GET | /v1/audit-events | Retrieve access history | audit:read |
| GET | /v1/explanations | Retrieve department explanations, unedited | explanations:read |
| POST | /v1/webhook-endpoints | Register signed delivery target | webhooks:write |
600 requests per minute per tenant. Aggregate endpoints are limited to 60 requests per minute.
Write operations accept an Idempotency-Key header retained for 24 hours.
Token creation, calls, response classifications, and exports are retained in the customer audit log.