Poseidon

Getting started

Authentication

Every Poseidon route is protected by an API key, except the open /health check. The base path is /api/v1.

Base URL

All API routes live under /api/v1. Your base URL is:

base url
https://api.poseidonmcp.com/api/v1

CORS is open (*), and every route accepts an OPTIONS preflight, which bypasses authentication.

API keys

Keys are prefixed psk_ and stored only as SHA-256 hashes — the plaintext is never stored. A key is shown exactly once at creation; reveal-once and rotate it from your dashboard.

Sending the key

Provide the key with either header. X-API-Key is checked first; otherwise Authorization: Bearer <key> is used.

bash
curl https://api.poseidonmcp.com/api/v1/alerts \
  -H "X-API-Key: psk_your_key_here"

# Or the bearer form:
curl https://api.poseidonmcp.com/api/v1/alerts \
  -H "Authorization: Bearer psk_your_key_here"

Errors

StatusConditionBody / behavior
401No key suppliedAPI key required
401Invalid or revoked keyInvalid API key
429Daily quota exceededdaily quota exceeded with a Retry-After header (seconds to next UTC midnight)

Daily quota

Each key has a daily request quota. Over quota, the API returns 429 daily quota exceeded with a Retry-After header giving the seconds until the counter resets at the next UTC midnight. The quota resets daily.

Fails open

The quota counter fails open on a database error — a counting failure will not block your requests.

Next

With auth in place, browse the MCP tool reference or the REST endpoint reference.