API Access

API Access

The SenderFortify REST API is available on the Enterprise plan. It provides programmatic access to all platform data and actions, enabling integration with your PSA, RMM, or internal tooling.

Enterprise plan required. API access is not available on Starter or Professional plans. Contact us to upgrade or discuss API access.

Authentication

All API requests are authenticated via session token. Obtain a token by posting credentials to /auth/login — the response sets a session cookie that authenticates subsequent requests. Pass it as a cookie on every request, or include it in the Authorization header:

Authorization: Bearer <session-token>

Sessions are scoped to your MSP account. All data returned is filtered to domains and settings belonging to your account.

Base URL

https://api.senderfortify.com/v1

Domains

GET/domainsList domains for your MSP
POST/domainsAdd a root domain
GET/domains/:idGet a single domain
PATCH/domains/:idUpdate DKIM selectors or suppressed checks
DELETE/domains/:idDelete domain and all associated data
GET/domains/:id/dns-recordsFetch live DNS records for a domain

Subdomains

GET/domains/:id/subdomainsList registered subdomains
POST/domains/:id/subdomainsRegister a subdomain
DELETE/domains/:id/subdomains/:subIdRemove a subdomain
POST/domains/:id/subdomains/:subId/scanTrigger a manual subdomain scan

Scans & findings

POST/scanTrigger a manual scan by domain ID
GET/domains/:id/scan-runsList scan run history
GET/domains/:id/scan-runs/:runId/findingsFindings for a specific scan run
GET/domains/:id/findingsRecent findings across all scan runs

Violations

GET/domains/:id/violationsList violations — ?state=OPEN (default) or RESOLVED
POST/violations/:id/resolveManually resolve a violation

Score & drift

GET/domains/:id/scoreScore history — ?limit=30
GET/domains/:id/driftDrift event history — ?limit=50
GET/msp/:id/summaryMSP-level summary: scores, health breakdown, open violations

Alerts

GET/alertsList recent alerts — ?limit=50

Alert destinations

GET/config/destinationsList destinations — ?msp_id=…
POST/config/destinationsCreate a destination (Slack or email)
PATCH/config/destinations/:idUpdate a destination
DELETE/config/destinations/:idDelete a destination
POST/config/destinations/testSend a test message to a destination

Alert routing rules

GET/config/rulesList routing rules — ?msp_id=…
POST/config/rulesCreate a routing rule
PATCH/config/rules/:idUpdate a routing rule
DELETE/config/rules/:idDelete a routing rule

Delivery queue

GET/config/deliveriesInspect delivery queue — ?status=pending

Full request/response schemas and filtering options are available to Enterprise customers after onboarding. Contact us to get access.