Rivitan Platform
Enterprise API & Automation
Production-grade API keys — scoped, allow-listed, and audited.
A complete REST API behind the same RBAC as the web interface, with hashed API keys, optional permission scopes, IP/CIDR allow-lists, per-key rate limits, rotation with a grace window, OpenAPI docs, and a built-in scheduler.
The problem
Governance tools that cannot be automated become another console someone has to remember to open. Weak API keys with no scopes or IP controls become a security exception waiting to happen.
What the platform does
- REST API covering the product surface — the web UI uses the same endpoints
- Hashed API keys (`mrn_…`) issued from an admin UI, never stored in clear text
- Keys carry roles — integrations are authorised exactly like people
- Optional permission scopes for least-privilege machine access
- IP / CIDR allow-lists and per-key rate limits
- Key rotation with a configurable grace window
- OpenAPI, Swagger, and ReDoc behind authentication
- Built-in scheduler for recurring governance and health tasks
- Audit logging for API activity and optional SIEM event shipping
Who this is for
Teams that want governance wired into existing automation rather than bolted beside it.
See API & Automation against your own environment
Book a walkthrough and we will show this capability end to end, then talk about what a pilot would look like for your estate.