Events and Analytics API

Use events and analytics endpoints to power dashboards, export investigations, and prove what the API is blocking.

Endpoints

GET /events
GET /events?query=req_123
GET /events.csv
GET /analytics/summary

Authentication is required.

Events

GET /events returns investigation events for assessments, rules, webhooks, protected link activity, and other account-scoped security actions when available.

Use query to search by request ID, email, domain, IP, rule, or other indexed fields supported by your account.

CSV Export

GET /events.csv

CSV exports are intended for investigations, compliance evidence, and offline analysis.

Summary Analytics

GET /analytics/summary

Summary analytics return aggregate counts and trends for risk levels, decisions, top signals, and endpoint usage when available.