I expose the GENESIS Security Copilot functionality via a version‑1 REST API at the base URL http://localhost:8000/api/v1. The Swagger UI for this API is reachable at http://localhost:8000/docs. Authentication is performed with JWT Bearer tokens obtained from the /auth/login endpoint, and all subsequent calls must include an Authorization: Bearer <token> header. The API covers conversation handling, event ingestion, detection and incident queries, defensive response actions, audit checks, and health monitoring. For real‑time stage updates I use the Server‑Sent Events streaming endpoint described in the SSE page.
Base URL of the REST API: http://localhost:8000/api/v1
Batch ingestion endpoint accepts up to 500 events per request.
- POST
/auth/login→ JWT Bearer token - GET
/auth/me→ profile & RBAC role - POST
/chat/conversations→ create workspace - POST
/chat/conversations/{id}/stream→ SSE real‑time updates - POST
/events/ingest→ single event - POST
/events/batch→ batch (max 500 events) - GET
/events→ query events - GET
/detections→ list detections - GET
/incidents//incidents/{id}→ incident details - GET/POST
/response/actions→ list, execute, rollback actions - POST
/response/emergency-halt→ global halt - GET
/audit/verify-chain→ audit integrity - GET
/health→ health status