Machine admin

Scorecard (machine)

GET/v1/admin/scorecard

evidence:read. The signed zero trust scorecard.

#Authentication

Service token

A scoped machine token (ims_...) made by an owner or admin under Settings, sent as Authorization: Bearer. Each route needs one scope; tokens expire within 90 days and can be pinned to address ranges. A token can stop agents but never start them, and never decides an approval.

Request

curl "https://immiscible.fly.dev/v1/admin/scorecard" \
  -H "authorization: Bearer $IMMISCIBLE_SERVICE_TOKEN"

const res = await fetch('https://immiscible.fly.dev/v1/admin/scorecard', {
  headers: {
    authorization: `Bearer ${process.env.IMMISCIBLE_SERVICE_TOKEN}`,
  },
});
const data = await res.json();
console.log(res.status, data);

import os
import requests

res = requests.get(
    "https://immiscible.fly.dev/v1/admin/scorecard",
    headers={
        "authorization": f"Bearer {os.environ['IMMISCIBLE_SERVICE_TOKEN']}",
    },
)
print(res.status_code, res.json())