Skip to main content
Use the Antigen API to manage your organization’s targets, runs, vulnerabilities, evidence, reports, hooks, Asset Map, and integrations. The base URL is https://api.antigen.sh/v1.

​
Authentication

Every authenticated request accepts one of the following credentials:
  • x-api-key: atg_sk_... for scripts and CI/CD.
  • Authorization: Bearer <access_token> for custom applications.
  • better-auth.session_token for browser applications.
Each credential resolves to the same organization and permissions. The device login endpoints do not require authentication.

​
API reference

The endpoint reference in this tab documents every request, parameter, response, and schema in Antigen API v1.