The Sentinel Network API provides endpoints for device verification, ban management, and publisher policy configuration.

​
Base URL

The sandbox environment is a fully isolated copy of the production API. Use it for integration testing — data created in sandbox does not affect production. Sandbox API keys are available from the Dashboard.

​
Authentication

All endpoints (except /health) require authentication. Include your API key as a Bearer token with every request:
Game-scoped operations also require the X-Game-Id header. See Authentication for details on API keys, scopes, and the gateway auth flow.

​
Endpoints

​
Device

​
Bans

​
Policy

​
System

​
Error Responses

All errors return a JSON object with an error field containing a machine-readable error code:

​
Rate Limiting

​
Sentinel API

Rate limiting for the Sentinel API is handled at the APISIX gateway level and is not enforced by the API itself. Contact your account representative for rate limit details.

​
Dashboard API

The dashboard enforces built-in rate limiting: Rate-limited requests receive HTTP 429 Too Many Requests with a Retry-After header:

​
Security Headers

The dashboard adds the following headers to every response:
  • X-Content-Type-Options: nosniff
  • X-Frame-Options: DENY
  • Referrer-Policy: strict-origin-when-cross-origin
  • Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' https:;
  • Strict-Transport-Security: max-age=31536000; includeSubDomains (production only)