Logo

Flamesight API reference

Explore Risk, Event, Simulation, Detection, and Credentials endpoints with complete parameter contracts, working request bodies, and copyable examples.

API access

Product APIs accept workspace-scoped PATs and service credentials in the Authorization header.

Create API credentials
1

Accept your Flamesight invite and sign in to confirm your workspace access.

2

Open API Tokens and create a PAT for human tooling or a service credential for backend systems.

3

Select only the credential actions your integration needs.

4

Send the token in the Authorization header and call the product API base URL.

Authentication

Choose a credential type based on who or what is calling the API.

Personal Access Token

fs_pat_...

Best for notebooks, Postman, command-line testing, and human-operated workflows.

Service Credential

fs_svc_...

Best for customer backends, scheduled jobs, CI/CD, workers, and machine-to-machine usage.

Browser Session

Identity Platform JWT

Used by the Flamesight web app for account, team, and credential-management operations.

Request Pattern

All product API credentials use the standard bearer header.

Authorization: Bearer fs_pat_...
Authorization: Bearer fs_svc_...

Credentials are scoped to one workspace, restricted to selected actions, expire at the time you set, and can be revoked from the Account page. Secrets are shown once when created.

API Reference

ReDoc-style contracts, examples, authorization requirements, and safe live queries.

Risk API

Read annual burn probability for a precisely defined circular area.

API base URL

https://flamesight.pinepeak.co.uk/api/v1/risk

Credential scope: Requires the fire_intelligence.risk.read action. Available actions depend on your workspace entitlements.

Status Codes

Common API responses and what to do next.

CodeMeaning
400The request shape, parameters, or payload are invalid.
401No valid user session, PAT, or service credential was supplied.
403The credential is valid but does not have the required workspace action or entitlement.
404The requested resource does not exist in the current workspace scope.
409The request conflicts with current workspace state, quota, or membership rules.
429The workspace or service is rate limited. Retry with backoff.
501The documented route is reserved but is not currently available.
5xxA Flamesight service or downstream dependency failed. Retry safely where the endpoint is idempotent.

Security Checklist

Keep API access narrow, auditable, and recoverable.

Use service credentials only from server-side systems, never browsers.
Grant only the actions needed by the integration.
Set credential expiries and rotate long-running integrations on a schedule.
Revoke credentials immediately if they appear in logs, screenshots, tickets, or chat.