Authentication

Authenticate with your FireMon Cloud username and password to get an API token. Send an HTTPS POST request to https://api.prod.firemon.cloud/authenticate with a JSON body:

{
  "username": "your-username",
  "password": "your-password"
}

An example using cURL:

curl --request POST \
  --url https://api.prod.firemon.cloud/authenticate \
  --header 'Content-Type: application/json' \
  --data '{ "username": "your-username", "password": "your-password" }'

The response is JSON:

{
  "expiration": 1755549613,
  "idToken": "...",
  "refreshToken": "..."
}

Field	Meaning
idToken	The token that authenticates your API requests. Send it as the Authorization header, with no Bearer prefix. (The REST API also accepts Bearer <token>.)
expiration	When idToken expires, as a Unix timestamp in seconds.
refreshToken	Issued with the session. The API does not currently expose a refresh endpoint, so authenticate again when idToken expires.

All FireMon Cloud APIs, REST and GraphQL, accept the same token.