Skip to main content
This page has moved to the API Reference Overview. The Rootly API is a REST API that lets you programmatically interact with your Rootly instance — incidents, alerts, teams, services, workflows, and the rest of your incident management data. It follows the JSON:API specification and is the same interface that powers Rootly’s official SDKs and tooling integrations.

​
Authentication

All API requests are authenticated with an Authorization: Bearer header over HTTPS. You can use either an API key generated in Organization Settings → API Keys, or an OAuth 2.0 access token — the API detects which one you sent automatically. Rootly supports three scopes of API keys:
  • Global API keys — interact with all entities in your Rootly instance, with permissions controlled by the role assigned at generation
  • Team API keys — inherit Team Admin permissions for entities owned by that team, such as its schedules and escalation policies
  • Personal API keys — inherit the permissions of the user who created the key

​
When to use the API

Use API keys for scripts, Terraform, and quick integrations. Use OAuth 2.0 tokens for third-party apps, CLI tools, and CI pipelines that need scoped access. Official Go and Python SDKs are available if you’d rather not build requests by hand, and the OpenAPI specification can be used to generate clients in other languages. Note that rate limits apply per API key, so plan high-volume automation accordingly.