REST API reference
Base URL: https://api.tngat.com. All requests are JSON and authenticated with Authorization: Bearer <api-key>.
Scoping
Org-scoped requests accept an optional ?orgId= override; without it the caller's active organization is used. Project- and service-scoped routes derive the org from the resource and verify the caller's role on it.
Listing and pagination
List endpoints accept ?limit=, ?cursor= and, on services, ?q= for search. The response body stays a plain array for compatibility, and the paging metadata rides in headers:
Errors
Errors always carry a JSON body of the form { "message": "...", "code": "..." }.
Most-used endpoints
Audit
Every mutating call writes an audit row naming the actor, the action, the target and the request outcome. Machine actors are recorded separately from people, so a service account's changes are distinguishable from a member's.