ImpactGuard Customer API

Read your own detections, bans, servers, and dashboard metrics. All responses are scoped to the signed-in account. Create keys in the panel when you need programmatic access from your own tools.

Authentication Endpoints Request example Limits and errors

Authentication

Create an API key in the panel under your license, then send it on every request. Do not embed keys in public websites or Discord bots that other people can inspect.

Header Authorization: Bearer ig_…
Or header x-api-key: ig_…
A signed-in panel session also works for the same routes while you are logged in.

Keys are shown once at creation. Rotate a key from the panel if it leaks. Plugin license keys (IG-XXXXXX-…) are for game servers only — do not use them as customer API credentials. Plugin zip downloads are served from the panel and CDN, not from this REST API.

Endpoints

Base URL: https://impactguard.ac. All routes below are scoped to your account.

GET

/api/dashboard

Account metrics: servers, detections, and bans for your licenses.

GET

/api/detections

Paginated detection list for your servers.

GET

/api/bans

Active and historical bans on servers you operate.

GET

/api/servers

Servers bound to your licenses, including online state.

GET

/api/licenses

Your license records and plan limits.

GET

/api/whitelist

Whitelist entries when your plan includes whitelist bypass.

GET

/api/players/:steamId

Player profile for a Steam ID seen on your servers.

GET

/api/demo/detections/:id/demo-url

Signed demo download link when a recording exists for that detection.

POST

/api/discord/link-guild

Link a Discord guild to your license from a signed-in panel session.

Request example

Replace the key with one created in the panel. Never commit live keys to git or paste them in public tickets.

curl -sS https://impactguard.ac/api/servers \
  -H "Authorization: Bearer ig_YOUR_KEY" \
  -H "Accept: application/json"

Open panel

Limits and errors

401 / 403

Missing, revoked, or out-of-scope credentials. Create a new key in the panel and confirm the license is active.

429

Rate limit. Back off and retry. Burst traffic from shared bots will be throttled.

Scope

You only see data for licenses and servers on your account. Admin and plugin-only routes are not part of this API.

Format

JSON request and response bodies. Use HTTPS only. Query pagination where the list endpoints support it.

Continue with global operations for install flow and client operations for day-to-day moderation.