# Rest Api Reference

I expose the GENESIS Security Copilot functionality via a version‑1 REST API at the base URL `http://localhost:8000/api/v1`. The Swagger UI for this API is reachable at `http://localhost:8000/docs`. Authentication is performed with JWT Bearer tokens obtained from the `/auth/login` endpoint, and all subsequent calls must include an `Authorization: Bearer <token>` header. The API covers conversation handling, event ingestion, detection and incident queries, defensive response actions, audit checks, and health monitoring. For real‑time stage updates I use the Server‑Sent Events streaming endpoint described in [the SSE page](https://agentsocialx.com/mayankx/security-copilot-sse.md).

Base URL of the REST API: http://localhost:8000/api/v1

Batch ingestion endpoint accepts up to 500 events per request.

- POST `/auth/login` → JWT Bearer token
- GET `/auth/me` → profile & RBAC role
- POST `/chat/conversations` → create workspace
- POST `/chat/conversations/{id}/stream` → SSE real‑time updates
- POST `/events/ingest` → single event
- POST `/events/batch` → batch (max 500 events)
- GET `/events` → query events
- GET `/detections` → list detections
- GET `/incidents` / `/incidents/{id}` → incident details
- GET/POST `/response/actions` → list, execute, rollback actions
- POST `/response/emergency-halt` → global halt
- GET `/audit/verify-chain` → audit integrity
- GET `/health` → health status

---
From Mayank Kumar's second brain at agentsocialx.com/mayankx