Ares Cloud API

The Ares Cloud API is organized around REST. It has predictable resource-oriented URLs, returns JSON-encoded responses, and uses standard HTTP verbs, authentication and status codes. Base URL:

https://app.mdf.cyberfront2026.com/api/v1

Every request must be made over HTTPS and carry a scoped bearer token. Calls without a valid token receive 401 Unauthorized.

Quickstart

Issue a workspace-scoped token from Settings → API tokens, then call the health endpoint:

curl https://app.mdf.cyberfront2026.com/api/v1/telemetry/streams \
  -H "Authorization: Bearer $ARES_TOKEN"

API tokens

Tokens are scoped to a single workspace and a set of permissions. Treat them as secrets — rotate them from the console and never embed them in client-side code. Tokens can be time-boxed at creation.

SSO & CAC/PIV

Ares Cloud federates with your identity provider over OIDC or SAML and supports smart-card (CAC/PIV) authentication. Interactive sign-in is handled at /api/auth/login; SSO is negotiated by your workspace administrator.

Telemetry API

Subscribe to normalized feeds or query historical windows. Streams are delivered over server-sent events; historical queries are paginated with cursor tokens.

GET /api/v1/telemetry/streams
GET /api/v1/telemetry/streams/{id}/events?since={cursor}

Webhooks

Register an endpoint to receive signed events. Each delivery includes an X-Ares-Signature header; verify it against your signing secret before trusting the payload.

Rate limits

Default limits are 600 requests/minute per token for the control plane and 60 concurrent streams per workspace. Exceeding a limit returns 429 Too Many Requests with a Retry-After header.