A RESTful API for technical partners. Build deep integrations, automate security workflows, and surface 4Remote's data inside your own products.
# Get all devices in your tenant, filtered by risk GET https://api.4remote.io/v1/devices Authorization: Bearer eyJhbGciOiJIUzI1... X-Tenant-Id: acme-corp Accept: application/json # Sending request # 200 OK { "devices": [ { "id": "d-9f2", "type": "laptop", "score": 42 }, { "id": "d-e1c", "type": "router", "score": 88 } ] }
Every request carries a Bearer token plus a tenant header. The same API surface serves every customer with strict data isolation between tenants. No cross-tenant leakage, by design.
Standard Authorization: Bearer header. Issued per partner, rotatable on demand.
An X-Tenant-Id header scopes every call. One API surface, many tenants.
Cross-tenant access is impossible at the framework level. Data isolation is part of the contract, not a configuration choice.
The API mirrors the platform: every domain you see in 4Remote is queryable, controllable, and automatable from your code.
Query, create, and manage team members. Control roles, account status, and sessions across your tenant.
Full device list: computers, phones, routers, IoT. Filter by type, OS, vendor, online status, security score. Real-time as devices are discovered.
Trigger scans, retrieve device-level results. Designed to feed automated pipelines and scheduled jobs.
Full CVE dataset, filterable by severity and CISA KEV membership. Prioritisation endpoints surface what to fix first.
Read and update Zero Trust statuses. Drives integrations with Cisco Meraki, Twingate, Palo Alto Prisma, and Tailscale.
Query notification history, manage delivery configuration for users and tenants.
Dedicated partner API: list, create, configure customer tenants and their users. Automate onboarding without the admin UI.
Step-by-step update instructions tailored to specific devices and OS versions. Embed in remediation flows or serve to end users.
Generate clients, run contract tests, or just poke endpoints in the browser. Pick what fits your workflow.
Machine-readable, industry-standard. Generate client SDKs in any language, stub a local server, import into design tools, or run automated contract tests.
openapi.yamlCurated collection covering the full API surface. Import into Postman, Insomnia, Bruno, or Hoppscotch. Authenticated calls in minutes. Always in sync with the OpenAPI spec.
collection.jsonHosted Swagger UI. Browse every endpoint, try calls in the browser, validate auth and response shapes before writing a line of code.
swagger UIAPI access is granted to approved technical partners. To discuss integration plans, explore what the API can do for your product, or request credentials, talk to the 4Remote team.
Current version: v1. Stable, with a clear deprecation policy for any future breaking changes.
Work with Us
Whether you want to see 4Remote in your own environment, talk through pricing, explore a partnership, or ask us something else entirely, we're ready to respond. Tell us what you need and the right person will come back to you directly.