Public API

Create an API key and authenticate

Every API request carries a key that identifies your organisation. Keys are shown once, can be scoped, and can be revoked the moment you no longer trust them.

Where to find it

Organization → Integrations → API Access → Manage Keys

Who can use it

Organization Admin

Time needed

2 minutes

Create a key

1. Go to Manage Keys

   Under Integrations → API Access.

2. Name it

   Use the name of the system that will use it ("FortiSIEM collector", "Power BI report"), so you know what breaks if you revoke it.

3. Choose a scope
   • Full Access: everything the API can do.
   • SIEM Read-Only: can call the SIEM event feed and nothing else. Use this for your SIEM.
4. Generate, then copy it immediately

   The key is shown once, in a copy-to-clipboard banner. DMARCS keeps only a hash and can never show it again. If you lose it, revoke it and create a new one.

Use it

Send it as a Bearer token in the Authorization header of every request:

Authorization: Bearer YOUR_API_KEY

Manage existing keys

The list shows each key's name, scope and creation date. Rename in place, or Revoke at any time; a revoked key stops working immediately.