> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rootly.com/llms.txt
> Use this file to discover all available pages before exploring further.

# API

> Generate and manage API keys to programmatically integrate with Rootly's incident management platform, including scopes, rotation, and authentication methods.

<script>
  window\.location.href = "/api-reference/overview";
</script>

This page has moved to the [API Reference Overview](/api-reference/overview).

The Rootly API is a REST API that lets you programmatically interact with your Rootly instance — incidents, alerts, teams, services, workflows, and the rest of your incident management data. It follows the [JSON:API](https://jsonapi.org) specification and is the same interface that powers Rootly's official SDKs and tooling integrations.

## Authentication

All API requests are authenticated with an `Authorization: Bearer` header over HTTPS. You can use either an API key generated in **Organization Settings → API Keys**, or an OAuth 2.0 access token — the API detects which one you sent automatically.

Rootly supports three scopes of API keys:

* **Global API keys** — interact with all entities in your Rootly instance, with permissions controlled by the role assigned at generation
* **Team API keys** — inherit Team Admin permissions for entities owned by that team, such as its schedules and escalation policies
* **Personal API keys** — inherit the permissions of the user who created the key

## When to use the API

Use API keys for scripts, Terraform, and quick integrations. Use OAuth 2.0 tokens for third-party apps, CLI tools, and CI pipelines that need scoped access. Official Go and Python SDKs are available if you'd rather not build requests by hand, and the OpenAPI specification can be used to generate clients in other languages.

Note that rate limits apply per API key, so plan high-volume automation accordingly.

## Related pages

* [API Reference Overview](/api-reference/overview) — authentication, rate limits, pagination, and request conventions
* [Official SDKs](/api-reference/sdks) — Go and Python client libraries
* [OAuth 2.0 & OpenID Connect](/api-reference/oauth2) — browser-based login and scoped third-party access