Machine admin
Evidence bundle (machine)
GET
/v1/admin/evidence/bundleevidence:read. The same bundle as the console’s, for archiving on a schedule.
#Authentication
Service token
A scoped machine token (ims_...) made by an owner or admin under Settings, sent as Authorization: Bearer. Each route needs one scope; tokens expire within 90 days and can be pinned to address ranges. A token can stop agents but never start them, and never decides an approval.