Endpoints

Embed
Preview of the card
<a href="https://watchtowerops.net/docs/endpoints"><img src="https://watchtowerops.net/docs/_api/public/orgs/aa5959cb-1a0b-4a9a-bc9a-913e7ac31cd9/spaces/b7aac181-9916-4805-b253-becc5fd2ca62/pages/ea1f446b-669c-4b98-bfab-cf847585c32d/social-card.svg?v=3e7ae33eec8b" alt="Endpoints" width="600" height="315"></a>

Watchtower has three public hosts with different jobs. On hosted Watchtower they are:

Host

Hosted URL

Serves

Used by

Console and API

https://watchtowerops.net

/v1/... API, /openapi.json, console

wtctl, Terraform, API clients

Gateway (ingest)

https://ingest.watchtowerops.net

OTLP /v1/traces, /v1/logs, /v1/metrics and other push formats

OTel SDKs, endpoint of the agent, otlpEndpoint of the browser SDK

Edge

https://edge.watchtowerops.net

RUM /v1/rum/*, replay, /v1/agents/*, CI /v1/ci/*, security intake

endpoint of the browser SDK, fleet_endpoint of the agent, CI webhooks

A self-hosted install has its own three URLs; GET /v1/platforms/config returns ingest_url and edge_url for the install you are on. POST /v1/projects/{prj}/ci-sources returns the full webhook_url.

Every host answers GET /healthz the same way:

{"status":"pass","checks":{"process":[{"status":"pass"}]},"version":"0d323ef9","build_time":"2026-11-06T20:18:22Z"}

A site with a Content-Security-Policy that runs the browser SDK must allow both the edge and the gateway in connect-src.

Updated