The Pentrova API is a REST interface for managing workspaces, targets, scans, and chains. Every request accepts and returns JSON unless an endpoint explicitly returns a binary artefact.

Base URL#

https://api.pentrova.ai/v1

The API is versioned through the path. v1 is the only stable version today, and breaking changes will ship under a new version while v1 remains available for a minimum of twelve months.

Response shape#

Successful responses return a JSON object with a data key and an optional meta key containing pagination or rate-limit metadata. Errors return an errors array with machine-readable codes and human-readable messages.

{
  "errors": [
    { "code": "target_not_found", "message": "No target with id t_aa3c" }
  ]
}

Pagination#

List endpoints accept page_size (up to 100) and a cursor token returned in meta.next_cursor. Cursor pagination is stable across concurrent writes.

Rate limits#

The default limit is 600 requests per minute per workspace. Rate-limit state is exposed through X-RateLimit-Remaining and X-RateLimit-Reset headers on every response.