# Public API

Source: https://www.fortrabbit.com/features/public-api
Created: 2026-08-23
Reviewed: 2026-08-23

> Everything the dashboard does, scriptable. Apps, environments, deployments and domains over HTTP, addressed by the same short IDs the dashboard shows. What gets done by clicking can be done by a pipeline, a script or an agent instead.


**Everything the dashboard does, scriptable.** Apps, environments, deployments and domains over HTTP, addressed by the same short IDs the dashboard shows. What gets done by clicking can be done by a pipeline, a script or an agent instead.

## The layer under everything else

The [CLI](/features/cli) is a client of this API, and the [MCP server](/features/mcp-server) is how agents reach it. Anything built directly against it sits at the same level as the tools fortrabbit ships — no second-class interface, no scraping a dashboard that was not built to be scraped.

## A reference that cannot drift

The endpoint reference is generated from the API itself, so it always describes what the API actually accepts.

:BlockLink{title="API reference" path="https://api.fortrabbit.com/v1/docs" property="none"}

Tokens, the entry point and the rate limits, with worked examples:

:BlockLink{title="Public API documentation" path="/platform/automation/api" property="docs"}

## FAQ

### What does the API cover?

**The dashboard objects** — Apps, environments, deployments, domains, teams, people and payment methods. Objects are addressed by the same short public IDs the dashboard shows, and collections take a repeated `publicId[]` parameter to fetch several known objects in one call.

### How does authentication work?

**A personal token** — A token is created in the dashboard and passed as a bearer credential on every request. It acts as the person who created it and sees exactly what that person sees. Tokens do not expire; unused ones are deleted, which takes effect immediately and leaves every other token working.

### Are there rate limits?

**Around 20 per minute** — Requests are counted per token in a sliding one-minute window. Every response carries the limit, the remainder and the reset; a rejected request answers `429` with the seconds to wait. Failed authentications are counted separately, per IP address.

### Is the API stable?

**It is in beta** — The API is in beta like the platform around it, so breaking changes are possible. The `/v1` prefix marks the shape of the API — pin nothing that cannot be adjusted.

---

- [CLI](/features/cli)
- [MCP server](/features/mcp-server)
- [Public API docs](/platform/automation/api)