Skip to main content
The Forest public API exposes a subset of platform data and operations for programmatic access, useful for compliance reporting, audit log archival, SIEM integration, and external tooling.

​
What the API exposes

Endpoint groupUse case
Activity logsTrack every action taken in Forest, exports for audit and compliance
Admin logsTrack configuration and administrative operations across the project
NotesRead and write collaboration notes on records
If you need data access beyond what’s exposed here, you have two options:
  • Use the Forest Agent directly, the agent serves your collections via its own REST API. See the Node.js or Ruby agent reference.
  • Connect via MCP, the MCP server exposes your data, actions, and workflows to AI agents under the same governance.

​
Base URL

All public API requests go to: 
https://api.forestadmin.com
Specific endpoints use a path scoped to your project and environment: 
GET /v1/project/{projectName}/environment/{environmentName}/activity-logs
GET /v1/project/{projectName}/admin-logs
See each endpoint page for the exact path and parameters.

​
Authentication

All requests require a Bearer token in the Authorization header: 
Authorization: Bearer YOUR_APPLICATION_TOKEN
Tokens must be generated by a user with an Admin role on the project. See Authentication for how to generate and manage tokens.

​
Rate limits

The public API enforces per-token rate limits. See Rate limits for current values, response headers, and best practices for handling throttling.

​
Common use cases

Audit and compliance

Export activity logs to a data warehouse for long-term retention. Build custom audit dashboards. Pull decision traces for regulator inquiries.

SIEM integration

Stream Forest activity into Splunk, Datadog, ELK, CloudWatch, or your existing SIEM.

External collaboration

Sync notes between Forest and external collaboration tools (Slack, Teams, internal CRMs).

Custom reporting

Pull operations data on a schedule and feed it into business reporting tools.

​
Getting started

1

Generate an application token

Project Settings → API Access → Generate New Token. The user generating the token must have Admin role on the project.
2

Make your first request

Use the token in the Authorization header. See Authentication for examples in cURL, Node.js, and Python.
3

Handle rate limits

Read the X-RateLimit-Remaining header in responses. Implement exponential backoff for 429 responses.

​
Next steps

Authentication

Generate and use API tokens.

Rate limits

Understand and handle limits.

Activity logs

The most-used endpoint group.