API Reference

Authentication.

All API requests require a bearer token in the Authorization header. Tokens are issued per environment and rotate every 90 days by default. Generate a token from the dashboard at app.tra-ce.ai/settings/api.

curl -H "Authorization: Bearer $TRACE_TOKEN" https://api.tra-ce.ai/v1/health

Events.

GET /v1/events — query events. Supports filtering by source, time range, MITRE technique, and evidence grade. Returns a paginated list of event records.

Endpoint specs scaffolded — full schemas continue post-launch.

Chains.

GET /v1/chains/:id — fetch a causal chain by ID. Returns the DAG, every edge with its grade, and the source events. Use this endpoint to reconstruct an investigation outside of the dashboard.

Endpoint specs scaffolded — full schemas continue post-launch.

Webhooks.

Subscribe to events when chains reach a confidence threshold or when an investigation agent completes. Webhook payloads are signed with HMAC-SHA256.

Endpoint specs scaffolded — full schemas continue post-launch.