Skip to main content

13 docs tagged with "api"

View all tags

API Keys

API keys provide programmatic access to HatiData. Keys are scoped to environments, hashed with Argon2id before storage, and support automatic rotation with a grace period.

API Overview

The HatiData Control Plane exposes a RESTful API for managing organizations, users, environments, policies, API keys, billing, webhooks, audit logs, and more. All management operations go through this API -- the dashboard is a client of the same endpoints.

Audit

HatiData maintains two separate audit trails: Query Audit for all SQL queries executed through the proxy, and IAM Audit for all administrative actions. Both are immutable and tamper-evident.

Billing

HatiData uses a credit-based billing model. Queries consume credits based on complexity (tables scanned, rows returned, query type). The billing API provides usage tracking and quota management.

Environments

Environments provide isolated workspaces within an organization. Each environment has its own policies, API keys, and data. Common configurations include development, staging, and production.

Organizations

Organizations are the top-level resource in HatiData. Every user, environment, policy, and API key belongs to an organization.

Policies

HatiData provides two policy systems: standard policies for column masking and row-level security, and ABAC policies for attribute-based access control. Both are scoped to environments.

Provisioning

The provisioning API covers three areas: JIT (Just-In-Time) Access for temporary privilege escalation, Agent Capabilities for granting structured permissions to AI agents, and Shadow Mode for risk-free deployment testing.

Query Proxy

HatiData provides two ways to execute SQL queries: the Postgres wire protocol (port 5439) for standard database clients, and the REST API for programmatic execution. Both methods go through the same 13-step query pipeline with transpilation, policy enforcement, and auditing.

Users

Manage users within an organization. Users are assigned roles that determine their permissions. See Authorization for role details.

Webhooks

Webhooks deliver real-time event notifications to your endpoints. HatiData signs every webhook payload with HMAC-SHA256 for verification.

Stay in the loop

Product updates, engineering deep-dives, and agent-native insights. No spam.