Skip to main content
The Wardin REST API lets you manage keys, budgets, policies, and pull analytics data programmatically. It’s the same API the Wardin dashboard uses internally.

Base URL

Authentication

All API requests require a wardin_sk_ key in the Authorization header:
The key must belong to a user with manager-level access to perform write operations. Read operations (analytics, key listing) work with any valid key. See Authentication for details.

Versioning

The API is versioned in the URL path (/v1/). Breaking changes (field removal, type change) require a new version with a 6-month deprecation window on the previous version. Adding optional fields is non-breaking and does not require a new version.

Response format

All responses are JSON. Success responses return the resource directly (no wrapper envelope):
List responses use cursor pagination:
Pass ?cursor=cursor_01j... to fetch the next page. Default page size is 50.

Error format

All errors use the same structured shape:

Interactive docs

The full interactive API reference (powered by Swagger UI) is available at:
Machine-readable OpenAPI JSON:

Rate limits on the API itself

Management API calls (not gateway proxy calls) are limited to 120 requests per minute per key. This limit is separate from the gateway proxy rate limits configured on keys.