Browse documentation
Dashboard API
Your tunnels and traffic, programmatically.
Authenticate requests
API endpoints require an Authorization: Bearer TOKEN header. The health check is public. The examples below assume the dashboard's default loopback binding.
curl -H "Authorization: Bearer YOUR_TOKEN" http://localhost:4040/api/statsEndpoint reference
These endpoints are documented by the upstream repository. Use the source for the complete response schemas.
| Method | Path | Purpose |
|---|---|---|
| GET | /healthz | Health check; no auth |
| GET | /api/stats | Server statistics |
| GET | /api/tunnels | Active tunnels |
| GET | /api/sessions | Connected sessions |
| GET | /api/requests | Captured requests |
| POST | /api/requests/{id}/replay | Replay a capture |
| GET / POST | /api/domains | List or add domains |
| GET / DELETE | /api/domains/{domain} | Read or remove a domain |
| GET | /api/domains/{domain}/dns | Required DNS records |
| POST | /api/domains/{domain}/verify | Verify domain ownership |
Follow a request
Proxied requests include an X-Request-ID header. WireRift preserves an incoming ID or generates one, helping you connect application logs with captured traffic.