Authentication
Pass your API key as a Bearer token in every request:av_. You can create and revoke keys from the API Keys section of the dashboard or via the API.
Dashboard read endpoints (
/dashboard/*) also accept session cookies and JWTs issued by the browser login flow. For programmatic access from outside a browser, use an API key.Endpoint categories
Ingestion endpoints
These endpoints accept telemetry data. They require an API key with thewrite scope.
Dashboard endpoints
These endpoints serve the AgentVista dashboard and accept session auth, JWTs, or API keys.Rate limiting and event limits
AgentVista enforces a monthly event (span) limit per account. When your limit is exceeded, ingestion endpoints return HTTP429. Dashboard read endpoints are not affected by the event limit.
The response body for a 429 is: