Skip to content

Warden API

Warden serves its REST API under /warden/api/ on your install’s address: cases, runs, runbooks, approvals and connections. The Warden backend also serves its OpenAPI document at /openapi.json and interactive docs at /docs on its own port, which the gateway doesn’t route. The API guide under Guides describes the endpoints runbook authors use most.

The veltro-sdk (Python) and @veltrosecurity/sdk (TypeScript) packages include a Warden client. Point it at your address plus /warden and send a Warden bearer credential:

from veltro_sdk import BearerToken, WardenClient
warden = WardenClient("https://warden.example.com/warden", auth=BearerToken(token))
cases = warden.cases.list()

Client SDKs covers installing the clients, timeouts and errors.

Warden’s tools are also available to AI agents over MCP at /mcp on the same address. Write actions still stop at the approvals your runbooks require. See MCP.