Public API
200+ endpoints documented in OpenAPI to integrate NebulaStack with your tools.
A fully documented REST API — over 200 endpoints in OpenAPI — so you can integrate NebulaStack into your own tooling instead of being limited to the web UI.
- 200+ endpoints documented in OpenAPI
- Covers environments, IaC generation, policy, FinOps, and billing
- Contract-tested against the live implementation
How it works
Three authentication mechanisms are supported side by side: a session cookie for browser use, personal access tokens with scoped permissions, and tenant-fixed API keys for service integrations — each gated by its own middleware, with CSRF double-submit protection applied only where cookie auth is in play.
A request authenticated with a tenant API key is hard-blocked from settings, profile, notification, and most admin routes — scoping isn't just documented, it's enforced in the same middleware layer that authenticates the request.
Authenticating with a personal access token
curl https://api.nebulastack.io/api/v1/environments \
-H "Authorization: Bearer nbk_live_51H3f...redacted" \
-H "X-Tenant-Id: tenant_8f2a"