Skip to main content

Authentication

For programmatic API usage, use the X-CLOUDGENI-API-KEY header. Do not substitute Authorization or x-api-key for this header. Create a key in the web app under Settings -> Developers -> API Keys. The complete cgk_... value is shown once, so copy it into your secret manager when it is created. Set the production API URL and key before using the examples:

Example

Notes

  • Keep API keys organization-scoped and secret-managed
  • Use separate keys for CI and local automation when possible
  • Prefer short automation flows over broad permanently shared credentials

CLI Alternative

If you prefer not to work with raw HTTP, use the CLI. It exposes the same general organization and scan surfaces with JSON output support.