SentinelOne

SentinelOne is an AI-driven extended detection and response (XDR) cloud security platform delivering autonomous endpoint protection, EDR, identity security, cloud workload protection, and threat hunting through its Singularity Platform. The Management API exposes the same operations as the web console for agents, threats, alerts, sites, accounts, exclusions, and policy management. Authentication uses tenant-issued API tokens passed in the Authorization header as `ApiToken `.

1 APIs 0 Features

SecurityXDREDREndpoint ProtectionThreat DetectionIncident ResponseCloud SecurityIdentity Security

APIs

SentinelOne Management API

Tenant-scoped REST API for managing agents, threats, alerts, sites, accounts, exclusions, policies, and reporting in the SentinelOne Singularity Platform. Each customer accesses...

GraphQL

SentinelOne GraphQL API

SentinelOne is an AI-powered endpoint security platform. The API covers agent management, threat detection alerts, automated response actions, forensics, vulnerability data, dee...

GRAPHQL

Resources

👥

GitHubOrganization

Sources

aid: sentinelone
name: SentinelOne
description: SentinelOne is an AI-driven extended detection and response (XDR) cloud security platform delivering autonomous
  endpoint protection, EDR, identity security, cloud workload protection, and threat hunting through its Singularity Platform.
  The Management API exposes the same operations as the web console for agents, threats, alerts, sites, accounts, exclusions,
  and policy management. Authentication uses tenant-issued API tokens passed in the Authorization header as `ApiToken <token>`.
type: Index
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
- Security
- XDR
- EDR
- Endpoint Protection
- Threat Detection
- Incident Response
- Cloud Security
- Identity Security
url: https://raw.githubusercontent.com/api-evangelist/sentinelone/refs/heads/main/apis.yml
created: '2026-05-11'
modified: '2026-05-11'
specificationVersion: '0.19'
apis:
- aid: sentinelone:management-api
  name: SentinelOne Management API
  description: Tenant-scoped REST API for managing agents, threats, alerts, sites, accounts, exclusions, policies, and reporting
    in the SentinelOne Singularity Platform. Each customer accesses the API at their own management console hostname under
    /web/api/v2.1 with an ApiToken Authorization header issued from console user settings.
  humanURL: https://<tenant>.sentinelone.net/api-doc/overview
  baseURL: https://<tenant>.sentinelone.net/web/api/v2.1
  tags:
  - XDR
  - EDR
  - Endpoint Security
  - Threat Management
  - REST
  properties:
  - type: Documentation
    url: https://<tenant>.sentinelone.net/api-doc/overview
  - type: Authentication
    url: https://www.stitchflow.com/user-management/sentinelone/api
  - type: PostmanCollection
    url: https://www.postman.com/api-evangelist/sentinelone/documentation/btzef0x/sentinelone
  - type: GraphQL
    url: graphql/sentinelone-graphql.md
common:
- type: GitHubOrganization
  url: https://github.com/Sentinel-One
- type: Website
  url: https://www.sentinelone.com
- type: Documentation
  url: https://www.sentinelone.com/resources/
- type: Pricing
  url: https://www.sentinelone.com/platform-packages/
- type: Signup
  url: https://www.sentinelone.com/request-demo/
- type: Support
  url: https://www.sentinelone.com/support/
- type: Blog
  url: https://www.sentinelone.com/blog/
- type: LinkedIn
  url: https://www.linkedin.com/company/sentinelone/
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com