Endpoints
All paths are under https://app.aiagentlens.com/api. This is a map, not a full reference; each endpoint returns the same shapes the dashboard renders.
Organisation
| Method and path | Purpose |
|---|---|
GET /org | The current organisation and plan. |
GET /org/members, POST /org/members, DELETE /org/members/{id} | List, invite and remove members. |
GET/PUT /org/enforcement-mode | Read or set enforce / audit-only (admins). |
GET /org/plan, GET /plans | Current plan and the plan catalogue. |
GET /dashboard | The numbers on the Overview page. |
Agents
| Method and path | Purpose |
|---|---|
GET /agents, GET /agents/stats | Fleet list and summary. |
GET /agents/self | The calling agent's own record (agent token). |
POST /heartbeat | Liveness, hooks and policy version from an agent. |
GET /agent/config, GET /policy, GET /policy/yaml | Policy pulled by an agent. |
GET /packs, GET /packs/{name} | Rule pack download for entitled plans. |
POST /events | Audit event ingestion from an agent. |
Audit and posture
| Method and path | Purpose |
|---|---|
GET /audit, GET /audit/stats, GET /audit/mcp-servers | Audit log, counts, and the MCP servers observed. |
GET /posture/evidence, GET /posture/control-evidence | Attestations per framework and per control. |
GET /posture/attestation-chain | Hash-chain verification for a window. |
GET /posture/drift | Declared versus observed MCP capabilities. |
Compliance
| Method and path | Purpose |
|---|---|
GET /compliance/frameworks, POST /compliance/frameworks, POST /compliance/frameworks/disable | Enabled frameworks. |
GET /compliance/rules, GET /comply/rules | Rules and their control mappings. |
POST /compliance/scans, GET /compliance/scans/latest, /history, /detail, /projects | Comply scan ingestion and retrieval. |
GET /compliance/status | Coverage summary. |
Policy checks
| Method and path | Purpose |
|---|---|
POST /policy/check | Evaluate a command against the organisation's policy (agent token). |
POST /playground/analyze | Public evaluation against community rules. |