Skip to content

Authentication

All routes require API key authentication.

Required header

Header Description
x-api-key Key generated in the Mantis 3.0 portal.

Do not use JWT with this API

The Authorization header (including Bearer JWT) is not accepted for these routes. Requests that send Authorization: Bearer ... receive 401.

Rate limits

Per-IP limits, global spike handling, 429, and Retry-After are documented on Home under Rate limits, including a reference table.

Example (curl)

curl -sS "https://mantis3-api.safelabs.com.br/risks?page=1&page_size=10" \
  -H "x-api-key: YOUR_KEY_HERE"

With tenant:

curl -sS "https://mantis3-api.safelabs.com.br/risks?page=1&page_size=10" \
  -H "x-api-key: YOUR_KEY_HERE" \