Overview - ChangeGuard

Base URL

https://api.changeguard.ai

All API requests require authentication via one of:

API Key: X-API-Key: cg_your_key header (for agents and CI/CD)
Bearer Token: Authorization: Bearer TOKEN header (for dashboard/user sessions)

Method	Path	Description
GET	`/api/clusters`	List clusters
GET	`/api/cluster?id=X`	Get cluster snapshot
GET	`/api/score-history?clusterId=X`	Score history
GET	`/api/export?clusterId=X&format=csv`	Export report
GET	`/api/audit`	Audit trail
GET	`/api/correlations`	Cross-cluster risks
GET	`/api/argo/instances`	ArgoCD instances
GET	`/api/argo/applications`	ArgoCD applications
GET	`/api/keys`	List API keys
POST	`/api/keys`	Create API key

All responses are JSON. Errors return:

{
  "error": "description of the error"
}

No rate limits are currently enforced for authenticated requests. The WAF rate-limits unauthenticated requests to 2000/5min per IP.