The Denwen RMM API

POST/api/integrations/denwen-msp/v1/actions

Run an action on a device from a ticket

• stable
• Integration key
• Scope: read
• Contract 1.10.0
• denwenMspCreateAction

Runs a ticket action (script, reboot, patch_scan, and diagnostics where listed in ping.features.actions.kinds) as the Denwen MSP user's LINKED RMM user, with that user's own permission at the device's site. Needs BOTH the integration key AND an action assertion (typ: "denwen-action+jwt", purpose: "action") whose signature covers the exact action, the ticket and the idempotencyKey (contract §18.3); a leaked key alone cannot run anything. An action never creates an account link. script, reboot and diagnostics need trusted Denwen MSP MFA within features.actions.mfaMaxAgeMin. Only offered library scripts run; there is no free-form script. Answers 202 with the action queued, or 200 with replayed: true for a repeat of the same idempotencyKey, sub, device and action. The result arrives as the action.completed webhook. Time out after 5 s and retry with the same idempotencyKey and a new assertion. Limits: 10 per Denwen MSP user and 30 per integration per 60 s, on their own budget, and 6 per device per 10 minutes (contract §18.4, §18.9).

Request body

Responses

200

An idempotent repeat: the existing action, nothing dispatched again.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

200 response of POST /api/integrations/denwen-msp/v1/actions

Field	Type	Description
action required	ContractAction	A ticket action (contract §18.6).
action.consoleUrl required	string | null	The device in the RMM console; link it only when it starts with the pinned base URL.
action.createdAt required	string (date-time)	When the action was accepted.
action.device required	object
action.device.customerId required	integer
action.device.deviceUid required	string	The permanent Denwen device id, DWN-XXXX-XXXX-XXXX-XXXX. Denwen MSP's key for a device.
action.device.id required	integer
action.device.siteId required	integer
action.finishedAt required	string (date-time) | null
action.id required	string
action.idempotencyKey required	string
action.kind required	"script" | "reboot" | "patch_scan" | "diagnostics"	Open set on the wire: show an unknown kind generically.
action.reboot required	object | null
action.reboot.backOnlineAt required	string (date-time) | null
action.reboot.noticeSeconds required	integer	The notice actually given.
action.reboot.userLoggedOn required	boolean
action.refusal required	enum (25 values) | null	Set only for refused and abandoned. Open set.
action.requestedBy required	object
action.requestedBy.email required	string
action.requestedBy.flowmspSub required	string	The Denwen MSP user (sub) who asked. (Denwen MSP, formerly FlowMSP: the field name keeps its contract v1 name, and the RMM sends only this name; it never reads it from a request, where sub comes from the signed action assertion.)
action.requestedBy.rmmUserId required	integer	The LINKED RMM user the action runs as.
action.result required	object | null	Null until a terminal state other than refused.
action.result.exitCode required	integer | null
action.result.redactions required	integer	How many credential-looking spans were replaced before sending.
action.result.stderr required	string | null	Redacted, at most 16384 bytes; null when output is not sent or after 7 days.
action.result.stdout required	string | null	Redacted, at most 16384 bytes; null when output is not sent or after 7 days.
action.result.summary required	string
action.result.truncated required	boolean
action.script required	object | null
action.script.id required	integer
action.script.name required	string
action.script.version required	integer
action.startedAt required	string (date-time) | null
action.state required	"queued" | "running" | "succeeded" | "failed" | "timed_out" | "refused" | "abandoned"	Closed set.
action.ticket required	object
action.ticket.id required	string	Denwen MSP's ticket id.
action.ticket.number required	string | null	The ticket number people use, e.g. 10523.
action.ticket.url required	string	https, with the origin of the integration webhook URL.
contractVersion required	string
replayed required	boolean	True on an idempotent repeat (200): the existing action, nothing dispatched again.

202

Accepted and queued.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

202 response of POST /api/integrations/denwen-msp/v1/actions

Field	Type	Description
action required	ContractAction	A ticket action (contract §18.6).
action.consoleUrl required	string | null	The device in the RMM console; link it only when it starts with the pinned base URL.
action.createdAt required	string (date-time)	When the action was accepted.
action.device required	object
action.device.customerId required	integer
action.device.deviceUid required	string	The permanent Denwen device id, DWN-XXXX-XXXX-XXXX-XXXX. Denwen MSP's key for a device.
action.device.id required	integer
action.device.siteId required	integer
action.finishedAt required	string (date-time) | null
action.id required	string
action.idempotencyKey required	string
action.kind required	"script" | "reboot" | "patch_scan" | "diagnostics"	Open set on the wire: show an unknown kind generically.
action.reboot required	object | null
action.reboot.backOnlineAt required	string (date-time) | null
action.reboot.noticeSeconds required	integer	The notice actually given.
action.reboot.userLoggedOn required	boolean
action.refusal required	enum (25 values) | null	Set only for refused and abandoned. Open set.
action.requestedBy required	object
action.requestedBy.email required	string
action.requestedBy.flowmspSub required	string	The Denwen MSP user (sub) who asked. (Denwen MSP, formerly FlowMSP: the field name keeps its contract v1 name, and the RMM sends only this name; it never reads it from a request, where sub comes from the signed action assertion.)
action.requestedBy.rmmUserId required	integer	The LINKED RMM user the action runs as.
action.result required	object | null	Null until a terminal state other than refused.
action.result.exitCode required	integer | null
action.result.redactions required	integer	How many credential-looking spans were replaced before sending.
action.result.stderr required	string | null	Redacted, at most 16384 bytes; null when output is not sent or after 7 days.
action.result.stdout required	string | null	Redacted, at most 16384 bytes; null when output is not sent or after 7 days.
action.result.summary required	string
action.result.truncated required	boolean
action.script required	object | null
action.script.id required	integer
action.script.name required	string
action.script.version required	integer
action.startedAt required	string (date-time) | null
action.state required	"queued" | "running" | "succeeded" | "failed" | "timed_out" | "refused" | "abandoned"	Closed set.
action.ticket required	object
action.ticket.id required	string	Denwen MSP's ticket id.
action.ticket.number required	string | null	The ticket number people use, e.g. 10523.
action.ticket.url required	string	https, with the origin of the integration webhook URL.
contractVersion required	string
replayed required	boolean	True on an idempotent repeat (200): the existing action, nothing dispatched again.

{
  "action": {
    "consoleUrl": "https://rmm.acme-msp.example/endpoint/1187",
    "createdAt": "2026-11-20T09:00:00.412Z",
    "device": {
      "customerId": 42,
      "deviceUid": "DWN-XYGW-9KF9-ZBEK-B8N$",
      "id": 1187,
      "siteId": 310
    },
    "finishedAt": null,
    "id": "act_01M6RS0K55X7AQ28PXWTGBGKGZ",
    "idempotencyKey": "tka_01JD4M9ZQ8V2X0B1C2D3E4F5G6",
    "kind": "script",
    "reboot": null,
    "refusal": null,
    "requestedBy": {
      "email": "sam.taylor@acme-msp.example",
      "flowmspSub": "usr_01JC2Z8Q4M7V9X0B1C2D3E4F5G",
      "rmmUserId": 12
    },
    "result": null,
    "script": {
      "id": 41,
      "name": "Clear print queue",
      "version": 3
    },
    "startedAt": null,
    "state": "queued",
    "ticket": {
      "id": "cm3tkt0nq8",
      "number": "10523",
      "url": "https://msp.example/tickets/cm3tkt0nq8"
    }
  },
  "contractVersion": "1.10.0",
  "replayed": false
}

400

invalid_request: a bad body (details names the field), or a bad claim in the assertion: details.action, details.ticket, details.idempotencyKey, details.parameters.<name> or details.grant; or details.reason: "ticket_url_origin" (the ticket URL is not on the webhook URL's origin).

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

400 response of POST /api/integrations/denwen-msp/v1/actions

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

401

unauthorized: the key, or the assertion, with details.reason one of the contract §15.13 assertion reasons (assertion_invalid, unknown_kid, bad_signature, issuer_mismatch, audience_mismatch, purpose_mismatch, assertion_expired, assertion_replayed).

• X-Request-Id: Correlates the request; equals requestId in an error body.

401 response of POST /api/integrations/denwen-msp/v1/actions

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

403

forbidden: the key is not a paired integration key or the tenant is suspended; or details.reason one of launch_not_configured, actions_disabled, action_kind_disabled, account_link_required, account_link_conflict, account_not_linkable, missing_permission, outside_site_scope, mfa_required (contract §18.8).

• X-Request-Id: Correlates the request; equals requestId in an error body.

403 response of POST /api/integrations/denwen-msp/v1/actions

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

{
  "error": {
    "code": "forbidden",
    "details": {
      "reason": "mfa_required"
    },
    "message": "This action needs a recent Denwen MSP sign-in with multi-factor authentication."
  },
  "requestId": "req_457caf4bbab2226d29523697"
}

404

not_found: the device does not exist or belongs to another tenant, or the script is not offered to this integration or not visible at the device's site (never 403).

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

404 response of POST /api/integrations/denwen-msp/v1/actions

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

409

forbidden: details.reason one of device_offline, device_not_active, device_pending_approval, device_reclaim_pending, agent_unsupported, action_in_progress, idempotency_conflict, script_changed, script_too_large, script_os_mismatch.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

409 response of POST /api/integrations/denwen-msp/v1/actions

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

410

integration_disabled: the integration client is disabled in the RMM. Stop until an administrator re-enables it.

• X-Request-Id: Correlates the request; equals requestId in an error body.

410 response of POST /api/integrations/denwen-msp/v1/actions

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

429

rate_limited: over 10 actions per Denwen MSP user or 30 per integration per 60 s, or 6 per device per 10 minutes. Retry after Retry-After seconds.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• Retry-After: Seconds to wait before retrying.
• X-Request-Id: Correlates the request; equals requestId in an error body.

429 response of POST /api/integrations/denwen-msp/v1/actions

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

500

internal: unexpected. Retry with backoff.

• X-Request-Id: Correlates the request; equals requestId in an error body.

500 response of POST /api/integrations/denwen-msp/v1/actions

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

503

unavailable: ticket actions are suspended on this RMM (details.reason: "actions_suspended") or not available right now. Retry later.

• X-Request-Id: Correlates the request; equals requestId in an error body.

503 response of POST /api/integrations/denwen-msp/v1/actions

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

curl -X POST "https://<your instance>/api/integrations/denwen-msp/v1/actions" \
  -H "Authorization: Bearer <your key>" \
  -H "Content-Type: application/json" \
  -d '{ … }'

GET/api/integrations/denwen-msp/v1/actions/{id}

Get one action

• stable
• Integration key
• Scope: read
• Contract 1.10.0
• denwenMspGetAction

The current state of an action this integration created; the fallback when action.completed has not arrived by timeoutSec + 5 minutes. result.stdout and result.stderr are null more than 7 days after finishedAt. Counts against the 120/60 s sync budget (contract §18.5).

Parameters

Responses

200

The action.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

200 response of GET /api/integrations/denwen-msp/v1/actions/{id}

Field	Type	Description
action required	ContractAction	A ticket action (contract §18.6).
action.consoleUrl required	string | null	The device in the RMM console; link it only when it starts with the pinned base URL.
action.createdAt required	string (date-time)	When the action was accepted.
action.device required	object
action.device.customerId required	integer
action.device.deviceUid required	string	The permanent Denwen device id, DWN-XXXX-XXXX-XXXX-XXXX. Denwen MSP's key for a device.
action.device.id required	integer
action.device.siteId required	integer
action.finishedAt required	string (date-time) | null
action.id required	string
action.idempotencyKey required	string
action.kind required	"script" | "reboot" | "patch_scan" | "diagnostics"	Open set on the wire: show an unknown kind generically.
action.reboot required	object | null
action.reboot.backOnlineAt required	string (date-time) | null
action.reboot.noticeSeconds required	integer	The notice actually given.
action.reboot.userLoggedOn required	boolean
action.refusal required	enum (25 values) | null	Set only for refused and abandoned. Open set.
action.requestedBy required	object
action.requestedBy.email required	string
action.requestedBy.flowmspSub required	string	The Denwen MSP user (sub) who asked. (Denwen MSP, formerly FlowMSP: the field name keeps its contract v1 name, and the RMM sends only this name; it never reads it from a request, where sub comes from the signed action assertion.)
action.requestedBy.rmmUserId required	integer	The LINKED RMM user the action runs as.
action.result required	object | null	Null until a terminal state other than refused.
action.result.exitCode required	integer | null
action.result.redactions required	integer	How many credential-looking spans were replaced before sending.
action.result.stderr required	string | null	Redacted, at most 16384 bytes; null when output is not sent or after 7 days.
action.result.stdout required	string | null	Redacted, at most 16384 bytes; null when output is not sent or after 7 days.
action.result.summary required	string
action.result.truncated required	boolean
action.script required	object | null
action.script.id required	integer
action.script.name required	string
action.script.version required	integer
action.startedAt required	string (date-time) | null
action.state required	"queued" | "running" | "succeeded" | "failed" | "timed_out" | "refused" | "abandoned"	Closed set.
action.ticket required	object
action.ticket.id required	string	Denwen MSP's ticket id.
action.ticket.number required	string | null	The ticket number people use, e.g. 10523.
action.ticket.url required	string	https, with the origin of the integration webhook URL.
contractVersion required	string

401

unauthorized: the Authorization header is missing, or the key is malformed, unknown, has the wrong secret, or is revoked or expired (the message says which). Do not retry; surface to an administrator.

• X-Request-Id: Correlates the request; equals requestId in an error body.

401 response of GET /api/integrations/denwen-msp/v1/actions/{id}

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

403

forbidden: the key is not an integration key paired with Denwen MSP, or the RMM tenant is suspended. Do not retry.

• X-Request-Id: Correlates the request; equals requestId in an error body.

403 response of GET /api/integrations/denwen-msp/v1/actions/{id}

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

404

not_found: no such action, or another integration created it (never 403).

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

404 response of GET /api/integrations/denwen-msp/v1/actions/{id}

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

410

integration_disabled: the integration client is disabled in the RMM. Stop until an administrator re-enables it.

• X-Request-Id: Correlates the request; equals requestId in an error body.

410 response of GET /api/integrations/denwen-msp/v1/actions/{id}

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

429

rate_limited: over 120 requests per integration per fixed 60 s window. Retry after Retry-After seconds.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• Retry-After: Seconds to wait before retrying.
• X-Request-Id: Correlates the request; equals requestId in an error body.

429 response of GET /api/integrations/denwen-msp/v1/actions/{id}

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

500

internal: unexpected. Retry with backoff.

• X-Request-Id: Correlates the request; equals requestId in an error body.

500 response of GET /api/integrations/denwen-msp/v1/actions/{id}

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

503

unavailable: ticket actions are not available right now. Retry later.

• X-Request-Id: Correlates the request; equals requestId in an error body.

503 response of GET /api/integrations/denwen-msp/v1/actions/{id}

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

curl "https://<your instance>/api/integrations/denwen-msp/v1/actions/<id>" \
  -H "Authorization: Bearer <your key>"

POST/api/integrations/denwen-msp/v1/alert-tickets

Write ticket links back to alerts

• stable
• Integration key
• Scope: read
• Contract 1.10.0
• denwenMspAlertTickets

Links 1 to 100 alerts to their Denwen MSP tickets, for the console's ticket badge. A ticket URL must share the origin of the integration webhook URL. A closed or resolved ticket resolves an alert that does not clear itself when resolve-on-close is on. A write-back older than the stored one is ignored_stale. not_found is final (an unknown alert, or its link expired after 90 days). The response is Cache-Control: no-store. Its own budget of 120 per integration per 60 s, not the sync budget (contract §10, §16.6).

Request body

Responses

200

One result per link, in request order.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

200 response of POST /api/integrations/denwen-msp/v1/alert-tickets

Field	Type	Description
results required	array of object
results[].alertId required	integer
results[].outcome required	"linked" | "updated" | "resolved_alert" | "ignored_stale" | "not_found"	not_found: no such alert for this integration, or its link expired (90 days); final, do not retry.

{
  "results": [
    {
      "alertId": 812,
      "outcome": "resolved_alert"
    },
    {
      "alertId": 813,
      "outcome": "linked"
    },
    {
      "alertId": 815,
      "outcome": "not_found"
    }
  ]
}

400

invalid_request: a bad body (details names the field), or details.reason ticket_url_origin or too_many_links.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

400 response of POST /api/integrations/denwen-msp/v1/alert-tickets

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

401

unauthorized: the Authorization header is missing, or the key is malformed, unknown, has the wrong secret, or is revoked or expired (the message says which). Do not retry; surface to an administrator.

• X-Request-Id: Correlates the request; equals requestId in an error body.

401 response of POST /api/integrations/denwen-msp/v1/alert-tickets

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

403

forbidden: the key is not an integration key paired with Denwen MSP, the tenant is suspended, or details.reason is alerts_disabled (alerts are off for this integration). Do not retry.

• X-Request-Id: Correlates the request; equals requestId in an error body.

403 response of POST /api/integrations/denwen-msp/v1/alert-tickets

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

410

integration_disabled: the integration client is disabled in the RMM. Stop until an administrator re-enables it.

• X-Request-Id: Correlates the request; equals requestId in an error body.

410 response of POST /api/integrations/denwen-msp/v1/alert-tickets

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

429

rate_limited: over 120 write-backs per integration per 60 s. Retry after Retry-After seconds.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• Retry-After: Seconds to wait before retrying.
• X-Request-Id: Correlates the request; equals requestId in an error body.

429 response of POST /api/integrations/denwen-msp/v1/alert-tickets

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

500

internal: unexpected. Retry with backoff.

• X-Request-Id: Correlates the request; equals requestId in an error body.

500 response of POST /api/integrations/denwen-msp/v1/alert-tickets

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

curl -X POST "https://<your instance>/api/integrations/denwen-msp/v1/alert-tickets" \
  -H "Authorization: Bearer <your key>" \
  -H "Content-Type: application/json" \
  -d '{ … }'

GET/api/integrations/denwen-msp/v1/alerts

List open alerts

• stable
• Integration key
• Scope: read
• Contract 1.10.0
• denwenMspListAlerts

A snapshot of the open alerts that pass this integration's alert filter (severity, categories and eventTypes), by id ascending, for reconciling after a gap or an integration.resync_suggested naming alerts. Empty while alerts are off. Follow nextCursor until it is null. customerId and siteId filter; another tenant's id returns an empty page (contract §16.5).

Parameters

Responses

200

One page of open alerts.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

200 response of GET /api/integrations/denwen-msp/v1/alerts

Field	Type	Description
data required	array of ContractAlert	Open alerts that pass the integration alert filter, by id ascending.
data[].asset required	ContractHypervisorAlertAsset | ContractUptimeAlertAsset | null	§16.11 (1.8.0): the hypervisor host or website/port check of a hypervisor / uptime alert; null for every other kind.
data[].autoClears required	boolean	True when the RMM clears the alert itself once the condition ends.
data[].category required	string
data[].consoleUrl required	string | null
data[].description required	string | null
data[].device required	ContractDeviceRef | null	At the time of the event. Null for site_outage, hypervisor and uptime.
data[].device.customerId required	integer
data[].device.deviceUid required	string	The permanent Denwen device id, DWN-XXXX-XXXX-XXXX-XXXX. Denwen MSP's key for a device.
data[].device.id required	integer
data[].device.siteId required	integer
data[].id required	integer
data[].key required	string	Stable de-duplication key for the condition.
data[].lastOccurredAt required	string (date-time)	The latest occurrence.
data[].raisedAt required	string (date-time)	When the alert was raised.
data[].resolvedAt required	string (date-time) | null
data[].severity required	string	warning or critical today. Open set; read an unknown value as warning.
data[].site required	object | null	Null only for hypervisor and uptime (§16.11), which are sent only to an integration that opted in.
data[].site.customerId required	integer
data[].site.id required	integer
data[].source required	object
data[].source.kind required	enum (9 values)	Open set on the wire.
data[].source.ruleId required	integer | null
data[].source.ruleName required	string | null
data[].state required	"open" | "resolved"
data[].title required	string
nextCursor required	string | null	Null on the last page.
serverTime required	string (date-time)	The watermark: do not clear an alert learnt of after it merely because no page listed it.

{
  "data": [
    {
      "asset": null,
      "autoClears": false,
      "category": "Events",
      "consoleUrl": "https://rmm.acme-msp.example/endpoint/1187",
      "description": "Event 4625 (Microsoft-Windows-Security-Auditing) matched rule \"Repeated failed sign-ins\": An account failed to log on. Account name: reception. Failure reason: unknown user name or bad password.",
      "device": {
        "customerId": 42,
        "deviceUid": "DWN-XYGW-9KF9-ZBEK-B8N$",
        "id": 1187,
        "siteId": 310
      },
      "id": 812,
      "key": "DWN-XYGW-9KF9-ZBEK-B8N$|eventRule:31:Security:4625",
      "lastOccurredAt": "2026-11-06T15:53:05.561Z",
      "raisedAt": "2026-10-22T09:12:40.000Z",
      "resolvedAt": null,
      "severity": "warning",
      "site": {
        "customerId": 42,
        "id": 310
      },
      "source": {
        "kind": "event_rule",
        "ruleId": 31,
        "ruleName": "Repeated failed sign-ins"
      },
      "state": "open",
      "title": "Repeated failed sign-ins on CD-RECEPTION01"
    },
    {
      "asset": null,
      "autoClears": true,
      "category": "Storage",
      "consoleUrl": "https://rmm.acme-msp.example/endpoint/1187",
      "description": "Rule \"Disk space low\": disk_usage C: is 96.2% (threshold 90%).",
      "device": {
        "customerId": 42,
        "deviceUid": "DWN-XYGW-9KF9-ZBEK-B8N$",
        "id": 1187,
        "siteId": 310
      },
      "id": 813,
      "key": "DWN-XYGW-9KF9-ZBEK-B8N$|rule:17:disk_usage:C:",
      "lastOccurredAt": "2026-10-22T09:20:05.000Z",
      "raisedAt": "2026-10-22T09:20:05.000Z",
      "resolvedAt": null,
      "severity": "critical",
      "site": {
        "customerId": 42,
        "id": 310
      },
      "source": {
        "kind": "telemetry_rule",
        "ruleId": 17,
        "ruleName": "Disk space low"
      },
      "state": "open",
      "title": "Disk C: 96% full on CD-RECEPTION01"
    },
    {
      "asset": null,
      "autoClears": true,
      "category": "Connectivity",
      "consoleUrl": null,
      "description": null,
      "device": null,
      "id": 814,
      "key": "site:310|site-outage",
      "lastOccurredAt": "2026-10-22T09:31:00.000Z",
      "raisedAt": "2026-10-22T09:31:00.000Z",
      "resolvedAt": null,
      "severity": "critical",
      "site": {
        "customerId": 42,
        "id": 310
      },
      "source": {
        "kind": "site_outage",
        "ruleId": null,
        "ruleName": null
      },
      "state": "open",
      "title": "Site outage at Harley Street surgery: 4 of 5 endpoints are offline"
    }
  ],
  "nextCursor": null,
  "serverTime": "2026-11-06T15:52:36.438Z"
}

400

invalid_request (a bad parameter, named in details) or invalid_cursor (tampered with, older than 24 hours, or for other filters, resource or client: restart the listing without a cursor, same updatedSince).

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

400 response of GET /api/integrations/denwen-msp/v1/alerts

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

401

unauthorized: the Authorization header is missing, or the key is malformed, unknown, has the wrong secret, or is revoked or expired (the message says which). Do not retry; surface to an administrator.

• X-Request-Id: Correlates the request; equals requestId in an error body.

401 response of GET /api/integrations/denwen-msp/v1/alerts

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

403

forbidden: the key is not an integration key paired with Denwen MSP, or the RMM tenant is suspended. Do not retry.

• X-Request-Id: Correlates the request; equals requestId in an error body.

403 response of GET /api/integrations/denwen-msp/v1/alerts

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

410

integration_disabled: the integration client is disabled in the RMM. Stop until an administrator re-enables it.

• X-Request-Id: Correlates the request; equals requestId in an error body.

410 response of GET /api/integrations/denwen-msp/v1/alerts

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

429

rate_limited: over 120 requests per integration per fixed 60 s window. Retry after Retry-After seconds.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• Retry-After: Seconds to wait before retrying.
• X-Request-Id: Correlates the request; equals requestId in an error body.

429 response of GET /api/integrations/denwen-msp/v1/alerts

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

500

internal: unexpected. Retry with backoff.

• X-Request-Id: Correlates the request; equals requestId in an error body.

500 response of GET /api/integrations/denwen-msp/v1/alerts

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

curl "https://<your instance>/api/integrations/denwen-msp/v1/alerts" \
  -H "Authorization: Bearer <your key>"

POST/api/integrations/denwen-msp/v1/connectability

Check whether a user can connect to a device

• stable
• Integration key
• Scope: read
• Contract 1.10.0
• denwenMspConnectability

For the Connect drawer: can this Denwen MSP user connect to this device now, and what would happen? Takes an assertion with purpose: "check" (its mode is ignored). Errors are only those of the assertion checks and 404 for the device; every other state is reported in the body. It never creates a link and never issues or changes a link code. The integration key is read-scoped: it may POST here because this path is in its write allowlist (x-integration-write-allowlist). Limits: 30 per Denwen MSP user and 120 per integration per 60 s (contract §10, §15.11).

Request body

Responses

200

The answer.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

200 response of POST /api/integrations/denwen-msp/v1/connectability

Field	Type	Description
consent required	object
consent.agentCanPrompt required	boolean	False with required true: the relay refuses a desktop session until the agent is updated.
consent.required required	boolean
consent.source required	"platform" | "tenant" | "site" | "device" | "provider" | "provider-enforced" | null
contractVersion required	string
device required	object
device.approvalState required	"active" | "pending"
device.deviceUid required	string
device.id required	integer
device.lastSeen required	string (date-time) | null
device.lifecycleState required	string
device.reclaimPending required	boolean
device.status required	"online" | "offline"
mfa required	object
mfa.mfaMaxAgeMin required	integer
mfa.rmmChallengeRequired required	boolean
mfa.trustMfa required	boolean
mfa.trusted required	boolean
modes required	object
modes.console required	object
modes.console.available required	boolean
modes.console.reason required	enum (24 values) | null	A contract §15.13 reason, or null.
modes.control required	object
modes.control.available required	boolean
modes.control.reason required	enum (24 values) | null	A contract §15.13 reason, or null.
modes.view required	object
modes.view.available required	boolean
modes.view.reason required	enum (24 values) | null	A contract §15.13 reason, or null.
recording required	object	1.7.1 (additive; ping.features.connect.recordingInConnectability): the §15.17 recording-notice answer, in the same call.
recording.notice required	string	The words the person at the device is shown, exactly. Empty when record is false.
recording.noticeSha256 required	string | null	Lower-case hex SHA-256 (UTF-8) of notice: the rnh a control launch carries when requireAcknowledgement. Null when record is false.
recording.record required	boolean	A desktop session to this device would be recorded now.
recording.requireAcknowledgement required	boolean	The owning organisation requires the technician to confirm the notice has been given. Always false when record is false.
serverTime required	string (date-time)	The RMM clock.
user required	object
user.confirmUrl required	string | null	Always null: connectability never issues or changes a link code.
user.link required	"confirmed" | "pending" | "would_link" | "not_found" | "not_linkable" | "conflict" | "email_not_verified"
user.reason required	enum (23 values) | null
user.rmmUserId required	integer | null	Null unless confirmed or pending.

{
  "consent": {
    "agentCanPrompt": true,
    "required": true,
    "source": "tenant"
  },
  "contractVersion": "1.10.0",
  "device": {
    "approvalState": "active",
    "deviceUid": "DWN-XYGW-9KF9-ZBEK-B8N$",
    "id": 1187,
    "lastSeen": "2026-10-21T08:59:52.310Z",
    "lifecycleState": "active",
    "reclaimPending": false,
    "status": "online"
  },
  "mfa": {
    "mfaMaxAgeMin": 480,
    "rmmChallengeRequired": false,
    "trustMfa": true,
    "trusted": true
  },
  "modes": {
    "console": {
      "available": true,
      "reason": null
    },
    "control": {
      "available": true,
      "reason": null
    },
    "view": {
      "available": false,
      "reason": "mode_unsupported"
    }
  },
  "recording": {
    "notice": "This session is being recorded. The recording will be kept for 30 days and then deleted.\n\nRemote support sessions on Acme IT devices are recorded so that support work can be checked. Ask the IT team for a copy.",
    "noticeSha256": "199262cee030578266c5e2c2535eaaf599092f8fe52509d46f9a1f6a8c24a3ab",
    "record": true,
    "requireAcknowledgement": true
  },
  "serverTime": "2026-11-06T15:53:06.431Z",
  "user": {
    "confirmUrl": null,
    "link": "confirmed",
    "reason": null,
    "rmmUserId": 12
  }
}

400

invalid_request: a bad body; details names the field.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

400 response of POST /api/integrations/denwen-msp/v1/connectability

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

401

unauthorized: the key (see the authentication rules), or the assertion, with details.reason as for /v1/launch (contract §15.13).

• X-Request-Id: Correlates the request; equals requestId in an error body.

401 response of POST /api/integrations/denwen-msp/v1/connectability

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

{
  "error": {
    "code": "unauthorized",
    "details": {
      "reason": "assertion_expired"
    },
    "message": "The launch assertion has expired; check the server clocks."
  },
  "requestId": "req_205a4e5c9e21999bc2c29c1a"
}

403

forbidden: the key is not a paired integration key or the tenant is suspended; or details.reason is launch_not_configured or launch_disabled.

• X-Request-Id: Correlates the request; equals requestId in an error body.

403 response of POST /api/integrations/denwen-msp/v1/connectability

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

{
  "error": {
    "code": "forbidden",
    "details": {
      "reason": "launch_disabled"
    },
    "message": "Connect is not enabled in Denwen RMM."
  },
  "requestId": "req_f835bcc9e9a2b70c8811b51d"
}

404

not_found: the device in the assertion does not exist or belongs to another tenant.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

404 response of POST /api/integrations/denwen-msp/v1/connectability

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

410

integration_disabled: the integration client is disabled in the RMM. Stop until an administrator re-enables it.

• X-Request-Id: Correlates the request; equals requestId in an error body.

410 response of POST /api/integrations/denwen-msp/v1/connectability

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

429

rate_limited: over 30 checks per Denwen MSP user or 120 per integration per 60 s. Retry after Retry-After seconds.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• Retry-After: Seconds to wait before retrying.
• X-Request-Id: Correlates the request; equals requestId in an error body.

429 response of POST /api/integrations/denwen-msp/v1/connectability

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

500

internal: unexpected. Retry with backoff.

• X-Request-Id: Correlates the request; equals requestId in an error body.

500 response of POST /api/integrations/denwen-msp/v1/connectability

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

503

unavailable: Connect is temporarily unavailable. Retry after Retry-After if present.

• X-Request-Id: Correlates the request; equals requestId in an error body.

503 response of POST /api/integrations/denwen-msp/v1/connectability

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

curl -X POST "https://<your instance>/api/integrations/denwen-msp/v1/connectability" \
  -H "Authorization: Bearer <your key>" \
  -H "Content-Type: application/json" \
  -d '{ … }'

POST/api/integrations/denwen-msp/v1/customer-refs

Record Denwen MSP's ids on a customer

• stable
• Integration key
• Scope: read
• Contract 1.10.0
• denwenMspCustomerRefs

Records which Denwen MSP organization one customer is mapped to, or removes that with externalRefs: null. Off by default: ping.features.externalRefs.state says whether this integration may call it. The value replaces what is stored; a repeat changes nothing and a write older than the stored updatedAt is ignored_stale. It touches only this record, never a customer field the RMM owns, and sends no webhook. A url must share the origin of the integration webhook URL. The response is Cache-Control: no-store. Its own budget of 120 per integration per 60 s, not the sync budget (contract §10, §23).

Request body

Responses

200

What happened, and what the RMM now holds.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

200 response of POST /api/integrations/denwen-msp/v1/customer-refs

Field	Type	Description
customerId required	integer
externalRefs required	ContractCustomerRefs | null	What the RMM holds after this call.
externalRefs.organizationId required	string	The Denwen MSP organization this customer is mapped to.
externalRefs.organizationName required	string | null	The organization's name in Denwen MSP.
externalRefs.updatedAt required	string (date-time)	The change time Denwen MSP sent; a write older than it is ignored.
externalRefs.url required	string | null	The organization's page in Denwen MSP. https, on the origin of the integration webhook URL.
outcome required	"recorded" | "unchanged" | "cleared" | "ignored_stale"	unchanged: the same value, nothing moved. ignored_stale: older than what is stored, which externalRefs shows.

{
  "customerId": 42,
  "externalRefs": {
    "organizationId": "cm2k7r4pa0000lb08x9d1q5v2",
    "organizationName": "Contoso Dental",
    "updatedAt": "2026-10-20T14:03:00.000Z",
    "url": "https://msp.example/organizations/cm2k7r4pa0000lb08x9d1q5v2"
  },
  "outcome": "recorded"
}

400

invalid_request: a bad body (details names the field), or details.reason ref_url_origin or unassigned_customer.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

400 response of POST /api/integrations/denwen-msp/v1/customer-refs

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

{
  "error": {
    "code": "invalid_request",
    "details": {
      "field": "externalRefs.url",
      "reason": "ref_url_origin"
    },
    "message": "The URL must be https and on the same origin as this integration's webhook URL."
  },
  "requestId": "req_7030d5ca0fe1902f227793b3"
}

401

unauthorized: the Authorization header is missing, or the key is malformed, unknown, has the wrong secret, or is revoked or expired (the message says which). Do not retry; surface to an administrator.

• X-Request-Id: Correlates the request; equals requestId in an error body.

401 response of POST /api/integrations/denwen-msp/v1/customer-refs

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

403

forbidden: the key is not an integration key paired with Denwen MSP, the tenant is suspended, or details.reason is customer_refs_disabled (the switch is off for this integration). Do not retry.

• X-Request-Id: Correlates the request; equals requestId in an error body.

403 response of POST /api/integrations/denwen-msp/v1/customer-refs

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

{
  "error": {
    "code": "forbidden",
    "details": {
      "reason": "customer_refs_disabled"
    },
    "message": "Denwen MSP customer links are not enabled in Denwen RMM."
  },
  "requestId": "req_e240c1340ecb10b80901f97f"
}

404

not_found: no such customer in this tenant. Another tenant's customer answers the same.

• X-Request-Id: Correlates the request; equals requestId in an error body.

404 response of POST /api/integrations/denwen-msp/v1/customer-refs

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

{
  "error": {
    "code": "not_found",
    "message": "No such customer."
  },
  "requestId": "req_83393ce9c057ad2a091b24f5"
}

410

integration_disabled: the integration client is disabled in the RMM. Stop until an administrator re-enables it.

• X-Request-Id: Correlates the request; equals requestId in an error body.

410 response of POST /api/integrations/denwen-msp/v1/customer-refs

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

429

rate_limited: over 120 calls per integration per 60 s. Retry after Retry-After seconds.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• Retry-After: Seconds to wait before retrying.
• X-Request-Id: Correlates the request; equals requestId in an error body.

429 response of POST /api/integrations/denwen-msp/v1/customer-refs

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

500

internal: unexpected. Retry with backoff.

• X-Request-Id: Correlates the request; equals requestId in an error body.

500 response of POST /api/integrations/denwen-msp/v1/customer-refs

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

curl -X POST "https://<your instance>/api/integrations/denwen-msp/v1/customer-refs" \
  -H "Authorization: Bearer <your key>" \
  -H "Content-Type: application/json" \
  -d '{ … }'

GET/api/integrations/denwen-msp/v1/customers

List customers

• stable
• Integration key
• Scope: read
• Contract 1.10.0
• denwenMspListCustomers

The tenant's customers (contract §6.3). Sites are not embedded; use /v1/sites. Keyset-paginated on (updatedAt, id), ascending, up to T0 (the RMM database clock at the first page, carried in the cursor). Follow nextCursor until it is null, then store serverTime (the watermark, T0 minus 30 s) as the next updatedSince. An item appears at most once in one listing; consumers must be idempotent by (id, updatedAt) across listings. Tombstones (deleted items, kept 35 days) are included unless includeDeleted=false. A customerId or siteId naming another tenant's object returns an empty page (contract §6.2, §7).

Parameters

Responses

200

One page of the listing.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

200 response of GET /api/integrations/denwen-msp/v1/customers

Field	Type	Description
data required	array of ContractCustomer	Customers, live items and (with includeDeleted) tombstones, ordered by (updatedAt, id).
data[].accountRef required	string	The customer's immutable account reference (6 digits).
data[].address required	ContractAddress	A postal address. Every part is a string or null.
data[].address.city required	string | null	Town or city.
data[].address.country required	string | null	Country.
data[].address.line1 required	string | null	Address line 1.
data[].address.line2 required	string | null	Address line 2.
data[].address.postalCode required	string | null	Postcode or ZIP.
data[].address.region required	string | null	County, state or region.
data[].contactEmail required	string | null	Contact email.
data[].contactName required	string | null	Contact name.
data[].contactPhone required	string | null	Contact phone.
data[].deleted required	boolean	True only for a tombstone (contract §7).
data[].externalRefs required	ContractCustomerRefs | null	1.10.0, additive: what the paired Denwen MSP recorded here (contract §23). Null when nothing is, and on a tombstone.
data[].externalRefs.organizationId required	string	The Denwen MSP organization this customer is mapped to.
data[].externalRefs.organizationName required	string | null	The organization's name in Denwen MSP.
data[].externalRefs.updatedAt required	string (date-time)	The change time Denwen MSP sent; a write older than it is ignored.
data[].externalRefs.url required	string | null	The organization's page in Denwen MSP. https, on the origin of the integration webhook URL.
data[].id required	integer	Customer id. Never reused.
data[].kind required	"normal" | "unassigned"	unassigned for the tenant's reserved holding customer; exclude it from auto-matching.
data[].name required	string	Unique within the tenant.
data[].updatedAt required	string (date-time)	Last change; for a tombstone, the deletion time.
data[].website required	string | null	Website.
nextCursor required	string | null	Pass as cursor for the next page; null on the last page. A page may be empty with a non-null cursor.
serverTime required	string (date-time)	The WATERMARK: T0 minus 30 s, not the current clock. Send it as the next updatedSince after processing the last page.

400

invalid_request (a bad parameter, named in details) or invalid_cursor (tampered with, older than 24 hours, or for other filters, resource or client: restart the listing without a cursor, same updatedSince).

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

400 response of GET /api/integrations/denwen-msp/v1/customers

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

401

unauthorized: the Authorization header is missing, or the key is malformed, unknown, has the wrong secret, or is revoked or expired (the message says which). Do not retry; surface to an administrator.

• X-Request-Id: Correlates the request; equals requestId in an error body.

401 response of GET /api/integrations/denwen-msp/v1/customers

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

403

forbidden: the key is not an integration key paired with Denwen MSP, or the RMM tenant is suspended. Do not retry.

• X-Request-Id: Correlates the request; equals requestId in an error body.

403 response of GET /api/integrations/denwen-msp/v1/customers

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

410

integration_disabled: the integration client is disabled in the RMM. Stop until an administrator re-enables it.

• X-Request-Id: Correlates the request; equals requestId in an error body.

410 response of GET /api/integrations/denwen-msp/v1/customers

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

429

rate_limited: over 120 requests per integration per fixed 60 s window. Retry after Retry-After seconds.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• Retry-After: Seconds to wait before retrying.
• X-Request-Id: Correlates the request; equals requestId in an error body.

429 response of GET /api/integrations/denwen-msp/v1/customers

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

500

internal: unexpected. Retry with backoff.

• X-Request-Id: Correlates the request; equals requestId in an error body.

500 response of GET /api/integrations/denwen-msp/v1/customers

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

curl "https://<your instance>/api/integrations/denwen-msp/v1/customers" \
  -H "Authorization: Bearer <your key>"

GET/api/integrations/denwen-msp/v1/devices

List devices

• stable
• Integration key
• Scope: read
• Contract 1.10.0
• denwenMspListDevices

The tenant's devices in every lifecycle state, purged ones as tombstones (contract §6.5). customerId and siteId filter. updatedAt moves only for the synced fields of contract §6.7, not for lastSeen alone. Keyset-paginated on (updatedAt, id), ascending, up to T0 (the RMM database clock at the first page, carried in the cursor). Follow nextCursor until it is null, then store serverTime (the watermark, T0 minus 30 s) as the next updatedSince. An item appears at most once in one listing; consumers must be idempotent by (id, updatedAt) across listings. Tombstones (deleted items, kept 35 days) are included unless includeDeleted=false. A customerId or siteId naming another tenant's object returns an empty page (contract §6.2, §7).

Parameters

Responses

200

One page of the listing.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

200 response of GET /api/integrations/denwen-msp/v1/devices

Field	Type	Description
data required	array of ContractDevice	Devices, live items and (with includeDeleted) tombstones, ordered by (updatedAt, id).
data[].agentBuild required	string | null	The agent package identity.
data[].approvalState required	"active" | "pending"	pending: in the Unassigned container, or a held reclaim.
data[].capabilities required	object
data[].capabilities.credentialInjectV1 required	boolean	Always false in v1.
data[].customerId required	integer
data[].deleted required	boolean	True only for a tombstone (contract §7).
data[].deviceUid required	string	The permanent Denwen device id, DWN-XXXX-XXXX-XXXX-XXXX. Denwen MSP's key for a device.
data[].displayName required	string | null	The operator's label.
data[].domain required	string | null	Windows domain or workgroup.
data[].enrolledAt required	string (date-time)	When the device record was created.
data[].hardware required	object
data[].hardware.manufacturer required	string | null	System manufacturer.
data[].hardware.model required	string | null	System model.
data[].hardware.serialNumber required	string | null	System serial number.
data[].id required	integer	Device id, as used in denwen://session/<id>. Survives rename and re-enrolment.
data[].isVirtualMachine required	boolean | null
data[].lastSeen required	string (date-time) | null
data[].lifecycleState required	string	Open set: active, uninstalled, pending_delete, quarantined, offboarded; purged for a tombstone only.
data[].loggedUser required	string | null	As reported at the last agent authentication.
data[].name required	string	The hostname the agent reports.
data[].network required	object
data[].network.ipAddresses required	array of string	Every routable address, primary first, deduplicated.
data[].network.macAddresses required	array of string	Every valid MAC, primary first, deduplicated.
data[].network.primaryIp required	string | null	IPv4 of the primary adapter.
data[].network.primaryMac required	string | null	MAC of the primary adapter, upper-case, colon-separated.
data[].network.publicIp required	string | null	As recorded by the relay.
data[].os required	string | null	e.g. Windows 11 Pro.
data[].osBuild required	string | null	e.g. 22631.
data[].osVersion required	string | null	Windows feature release, e.g. 23H2.
data[].publicKeyFingerprint required	string | null	sha256: + lower-case hex SHA-256 of the agent key's DER SubjectPublicKeyInfo.
data[].publicKeySpki required	string | null	1.3.0: the agent key as standard base64 (padded) of its DER SubjectPublicKeyInfo, the exact bytes publicKeyFingerprint hashes; null exactly when the fingerprint is null. Pin it with the fingerprint; credential envelopes are encrypted to it (contract §17).
data[].siteId required	integer
data[].status required	"online" | "offline"
data[].type required	string | null	Lower-case, open set: workstation, laptop, server today.
data[].uninstalledAt required	string (date-time) | null
data[].updatedAt required	string (date-time)	Last change to a synced field (contract §6.7); for a tombstone, the purge time.
nextCursor required	string | null	Pass as cursor for the next page; null on the last page. A page may be empty with a non-null cursor.
serverTime required	string (date-time)	The WATERMARK: T0 minus 30 s, not the current clock. Send it as the next updatedSince after processing the last page.

400

invalid_request (a bad parameter, named in details) or invalid_cursor (tampered with, older than 24 hours, or for other filters, resource or client: restart the listing without a cursor, same updatedSince).

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

400 response of GET /api/integrations/denwen-msp/v1/devices

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

401

unauthorized: the Authorization header is missing, or the key is malformed, unknown, has the wrong secret, or is revoked or expired (the message says which). Do not retry; surface to an administrator.

• X-Request-Id: Correlates the request; equals requestId in an error body.

401 response of GET /api/integrations/denwen-msp/v1/devices

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

403

forbidden: the key is not an integration key paired with Denwen MSP, or the RMM tenant is suspended. Do not retry.

• X-Request-Id: Correlates the request; equals requestId in an error body.

403 response of GET /api/integrations/denwen-msp/v1/devices

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

410

integration_disabled: the integration client is disabled in the RMM. Stop until an administrator re-enables it.

• X-Request-Id: Correlates the request; equals requestId in an error body.

410 response of GET /api/integrations/denwen-msp/v1/devices

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

429

rate_limited: over 120 requests per integration per fixed 60 s window. Retry after Retry-After seconds.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• Retry-After: Seconds to wait before retrying.
• X-Request-Id: Correlates the request; equals requestId in an error body.

429 response of GET /api/integrations/denwen-msp/v1/devices

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

500

internal: unexpected. Retry with backoff.

• X-Request-Id: Correlates the request; equals requestId in an error body.

500 response of GET /api/integrations/denwen-msp/v1/devices

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

curl "https://<your instance>/api/integrations/denwen-msp/v1/devices" \
  -H "Authorization: Bearer <your key>"

GET/api/integrations/denwen-msp/v1/devices/{deviceUid}/recording-notice

Get the recording notice for a device

• stable
• Integration key
• Scope: read
• Contract 1.10.0
• denwenMspGetRecordingNotice

Would a desktop session to this device be recorded now, does its organisation require the operator to confirm the notice has been given before connecting (Administration, Data Protection), and what is the person at the device told? Decided by the same rule the relay applies when the session starts, so the two cannot disagree. When record && requireAcknowledgement, show notice and ask the technician to confirm it, then send rna (= deviceId) and rnh (SHA-256 of notice) in the mode: "control" launch assertion; without them /v1/launch answers 409 recording_notice_unacknowledged. Read only; no assertion (the answer does not depend on who asks); Cache-Control: no-store (contract §15.17).

Parameters

Responses

200

The recording notice decision.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

200 response of GET /api/integrations/denwen-msp/v1/devices/{deviceUid}/recording-notice

Field	Type	Description
data required	object
data.deviceId required	integer	The RMM's numeric device id: the session target a confirmation names (rna).
data.deviceUid required	string	The permanent Denwen device id, DWN-XXXX-XXXX-XXXX-XXXX. Denwen MSP's key for a device.
data.notice required	string	The words the person at the device is shown, exactly; rnh is the lower-case hex SHA-256 of this string as UTF-8. Empty when record is false.
data.record required	boolean	A desktop session to this device would be recorded now.
data.requireAcknowledgement required	boolean	The owning organisation requires the operator to confirm the notice has been given before connecting. Always false when record is false. A control launch must carry rna and rnh exactly when record && requireAcknowledgement.

{
  "data": {
    "deviceId": 1187,
    "deviceUid": "DWN-XYGW-9KF9-ZBEK-B8N$",
    "notice": "This session is being recorded. The recording will be kept for 30 days and then deleted.\n\nRemote support sessions on Acme IT devices are recorded so that support work can be checked. Ask the IT team for a copy.",
    "record": true,
    "requireAcknowledgement": true
  }
}

401

unauthorized: the Authorization header is missing, or the key is malformed, unknown, has the wrong secret, or is revoked or expired (the message says which). Do not retry; surface to an administrator.

• X-Request-Id: Correlates the request; equals requestId in an error body.

401 response of GET /api/integrations/denwen-msp/v1/devices/{deviceUid}/recording-notice

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

403

forbidden: the key is not an integration key paired with Denwen MSP, or the RMM tenant is suspended. Do not retry.

• X-Request-Id: Correlates the request; equals requestId in an error body.

403 response of GET /api/integrations/denwen-msp/v1/devices/{deviceUid}/recording-notice

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

404

not_found: no such device, or it belongs to another tenant (never 403).

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

404 response of GET /api/integrations/denwen-msp/v1/devices/{deviceUid}/recording-notice

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

410

integration_disabled: the integration client is disabled in the RMM. Stop until an administrator re-enables it.

• X-Request-Id: Correlates the request; equals requestId in an error body.

410 response of GET /api/integrations/denwen-msp/v1/devices/{deviceUid}/recording-notice

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

429

rate_limited: over 120 requests per integration per fixed 60 s window. Retry after Retry-After seconds.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• Retry-After: Seconds to wait before retrying.
• X-Request-Id: Correlates the request; equals requestId in an error body.

429 response of GET /api/integrations/denwen-msp/v1/devices/{deviceUid}/recording-notice

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

500

internal: unexpected. Retry with backoff.

• X-Request-Id: Correlates the request; equals requestId in an error body.

500 response of GET /api/integrations/denwen-msp/v1/devices/{deviceUid}/recording-notice

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

503

unavailable: the recording policy could not be read. Retry; launch nothing meanwhile.

• X-Request-Id: Correlates the request; equals requestId in an error body.

503 response of GET /api/integrations/denwen-msp/v1/devices/{deviceUid}/recording-notice

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

curl "https://<your instance>/api/integrations/denwen-msp/v1/devices/<deviceUid>/recording-notice" \
  -H "Authorization: Bearer <your key>"

GET/api/integrations/denwen-msp/v1/devices/{id}

Get one device

• stable
• Integration key
• Scope: read
• Contract 1.10.0
• denwenMspGetDevice

Always current (not cached), so suitable for a live status page. A purged device within the 35-day retention answers with its tombstone (contract §6.6).

Parameters

Responses

200

The device, the same shape as one listing item.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

200 response of GET /api/integrations/denwen-msp/v1/devices/{id}

Field	Type	Description
data required	ContractDevice	A managed device (contract §6.5). A tombstone also has lifecycleState: purged and status: offline.
data.agentBuild required	string | null	The agent package identity.
data.approvalState required	"active" | "pending"	pending: in the Unassigned container, or a held reclaim.
data.capabilities required	object
data.capabilities.credentialInjectV1 required	boolean	Always false in v1.
data.customerId required	integer
data.deleted required	boolean	True only for a tombstone (contract §7).
data.deviceUid required	string	The permanent Denwen device id, DWN-XXXX-XXXX-XXXX-XXXX. Denwen MSP's key for a device.
data.displayName required	string | null	The operator's label.
data.domain required	string | null	Windows domain or workgroup.
data.enrolledAt required	string (date-time)	When the device record was created.
data.hardware required	object
data.hardware.manufacturer required	string | null	System manufacturer.
data.hardware.model required	string | null	System model.
data.hardware.serialNumber required	string | null	System serial number.
data.id required	integer	Device id, as used in denwen://session/<id>. Survives rename and re-enrolment.
data.isVirtualMachine required	boolean | null
data.lastSeen required	string (date-time) | null
data.lifecycleState required	string	Open set: active, uninstalled, pending_delete, quarantined, offboarded; purged for a tombstone only.
data.loggedUser required	string | null	As reported at the last agent authentication.
data.name required	string	The hostname the agent reports.
data.network required	object
data.network.ipAddresses required	array of string	Every routable address, primary first, deduplicated.
data.network.macAddresses required	array of string	Every valid MAC, primary first, deduplicated.
data.network.primaryIp required	string | null	IPv4 of the primary adapter.
data.network.primaryMac required	string | null	MAC of the primary adapter, upper-case, colon-separated.
data.network.publicIp required	string | null	As recorded by the relay.
data.os required	string | null	e.g. Windows 11 Pro.
data.osBuild required	string | null	e.g. 22631.
data.osVersion required	string | null	Windows feature release, e.g. 23H2.
data.publicKeyFingerprint required	string | null	sha256: + lower-case hex SHA-256 of the agent key's DER SubjectPublicKeyInfo.
data.publicKeySpki required	string | null	1.3.0: the agent key as standard base64 (padded) of its DER SubjectPublicKeyInfo, the exact bytes publicKeyFingerprint hashes; null exactly when the fingerprint is null. Pin it with the fingerprint; credential envelopes are encrypted to it (contract §17).
data.siteId required	integer
data.status required	"online" | "offline"
data.type required	string | null	Lower-case, open set: workstation, laptop, server today.
data.uninstalledAt required	string (date-time) | null
data.updatedAt required	string (date-time)	Last change to a synced field (contract §6.7); for a tombstone, the purge time.

401

unauthorized: the Authorization header is missing, or the key is malformed, unknown, has the wrong secret, or is revoked or expired (the message says which). Do not retry; surface to an administrator.

• X-Request-Id: Correlates the request; equals requestId in an error body.

401 response of GET /api/integrations/denwen-msp/v1/devices/{id}

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

403

forbidden: the key is not an integration key paired with Denwen MSP, or the RMM tenant is suspended. Do not retry.

• X-Request-Id: Correlates the request; equals requestId in an error body.

403 response of GET /api/integrations/denwen-msp/v1/devices/{id}

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

404

not_found: no such device, or it belongs to another tenant (never 403), or it was purged more than 35 days ago.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

404 response of GET /api/integrations/denwen-msp/v1/devices/{id}

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

410

integration_disabled: the integration client is disabled in the RMM. Stop until an administrator re-enables it.

• X-Request-Id: Correlates the request; equals requestId in an error body.

410 response of GET /api/integrations/denwen-msp/v1/devices/{id}

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

429

rate_limited: over 120 requests per integration per fixed 60 s window. Retry after Retry-After seconds.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• Retry-After: Seconds to wait before retrying.
• X-Request-Id: Correlates the request; equals requestId in an error body.

429 response of GET /api/integrations/denwen-msp/v1/devices/{id}

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

500

internal: unexpected. Retry with backoff.

• X-Request-Id: Correlates the request; equals requestId in an error body.

500 response of GET /api/integrations/denwen-msp/v1/devices/{id}

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

curl "https://<your instance>/api/integrations/denwen-msp/v1/devices/<id>" \
  -H "Authorization: Bearer <your key>"

POST/api/integrations/denwen-msp/v1/launch

Launch a remote session or console hand-off

• stable
• Integration key
• Scope: read
• Contract 1.10.0
• denwenMspLaunch

Needs BOTH the integration key AND a launch assertion signed by the key the tenant registered (contract §15.3); a leaked key alone cannot open a session. The integration key is read-scoped: it may POST here because this path is in its write allowlist (x-integration-write-allowlist), not because of its scope. next says what to do: open_viewer (navigate to viewerUri once), open_console or complete_mfa_in_console (open consoleUrl in a new tab), or, only for a request with client: "web" (1.3.0), open_web_viewer (open webUrl in a new tab; the RMM hand-off signs in and opens its web viewer). Codes are single-use and expire after 60 s; the response is Cache-Control: no-store. Limits: 12 per Denwen MSP user and 60 per integration per 60 s, on their own budget, not the 120/60 s sync budget (contract §10, §15.8).

Request body

Responses

200

Launched.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

200 response of POST /api/integrations/denwen-msp/v1/launch

Field	Type	Description
consent required	object
consent.required required	boolean	True when the person at the machine will be asked to allow the session.
consent.source required	"platform" | "tenant" | "site" | "device" | "provider" | "provider-enforced" | null
consoleUrl required	string | null	Non-null when next is open_console or complete_mfa_in_console. Always <baseUrl>/handoff#handoff=hnd_....
contractVersion required	string
device required	object
device.deviceUid required	string
device.id required	integer
device.status required	"online" | "offline"
expiresAt required	string (date-time)	When the issued code (viewer or console) expires: 60 s after issue.
launchId required	string	Correlates this launch with session.* events.
mfa required	object
mfa.rmmChallengeRequired required	boolean
mfa.satisfiedBy required	"flowmsp" | "not_required" | null	flowmsp: Denwen MSP's own MFA was trusted (the value keeps its contract v1 spelling, formerly FlowMSP, and the RMM sends only this value). not_required: no second factor was needed. Null when the RMM will ask for its own code.
mode required	"control" | "console"	Echo of the assertion's mode.
next required	"open_viewer" | "open_console" | "complete_mfa_in_console" | "open_web_viewer"	What Denwen MSP does next. open_web_viewer (1.3.0) is returned only to a request that said client: "web".
user required	object
user.email required	string
user.link required	"confirmed"
user.linkedNow required	boolean	True when this launch created the link.
user.rmmUserId required	integer
viewerUri required	string | null	Non-null only when next is open_viewer. Always starts with denwen://session/. Opaque: never parse, store or log it.
webUrl required	string | null	1.3.0: non-null only when next is open_web_viewer. Always <baseUrl>/handoff#handoff=hnd_...; open it in a new tab with noopener,noreferrer.

{
  "consent": {
    "required": true,
    "source": "tenant"
  },
  "consoleUrl": null,
  "contractVersion": "1.10.0",
  "device": {
    "deviceUid": "DWN-XYGW-9KF9-ZBEK-B8N$",
    "id": 1187,
    "status": "online"
  },
  "expiresAt": "2026-11-06T15:54:06.414Z",
  "launchId": "lnc_01M6RS0K3CT3PAE7KX3DFA9QNS",
  "mfa": {
    "rmmChallengeRequired": false,
    "satisfiedBy": "flowmsp"
  },
  "mode": "control",
  "next": "open_viewer",
  "user": {
    "email": "sam.taylor@acme-msp.example",
    "link": "confirmed",
    "linkedNow": false,
    "rmmUserId": 12
  },
  "viewerUri": "denwen://session/1187?relay=wss%3A%2F%2Feu1.rmm.acme-msp.example&code=e1143198d4a46139765ca8a3f7184d0b&theme=dark&name=Reception%20PC",
  "webUrl": null
}

400

invalid_request: a bad body (details names the field), or details.mode: "unsupported" (view is not available), details.grant: "unsupported", or (1.3.0) details.client: must be native or web or web needs mode control.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

400 response of POST /api/integrations/denwen-msp/v1/launch

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

{
  "error": {
    "code": "invalid_request",
    "details": {
      "mode": "unsupported"
    },
    "message": "This Connect option is not available yet."
  },
  "requestId": "req_0a818f76aece51a7e1445e00"
}

401

unauthorized: the key (see the authentication rules), or the assertion, with details.reason one of assertion_invalid, unknown_kid, bad_signature, issuer_mismatch, audience_mismatch, purpose_mismatch, assertion_expired, assertion_replayed (contract §15.13).

• X-Request-Id: Correlates the request; equals requestId in an error body.

401 response of POST /api/integrations/denwen-msp/v1/launch

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

{
  "error": {
    "code": "unauthorized",
    "details": {
      "reason": "bad_signature"
    },
    "message": "Connect is misconfigured; ask an administrator to check the Denwen RMM signing key."
  },
  "requestId": "req_0af6543535a5a728554082e2"
}

403

forbidden: the key is not a paired integration key or the tenant is suspended; or Connect refused, with details.reason one of launch_not_configured, launch_disabled, account_not_found, account_not_linkable, account_link_pending (with a fresh details.confirmUrl; only the newest works), account_link_conflict (with details.conflict), email_not_verified, missing_permission, outside_site_scope; or (1.3.0) web_viewer_disabled (client: "web" while the RMM has not released its web viewer; retry with native).

• X-Request-Id: Correlates the request; equals requestId in an error body.

403 response of POST /api/integrations/denwen-msp/v1/launch

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

{
  "error": {
    "code": "forbidden",
    "details": {
      "confirmUrl": "https://rmm.acme-msp.example/handoff#link=lnk_QoQCenbc9K8DtC_o71uy51yRP88sapzXI4yRHGy_efQ",
      "reason": "account_link_pending"
    },
    "message": "Confirm the link in Denwen RMM."
  },
  "requestId": "req_e8a339ab59465212cb0683f9"
}

404

not_found: the device in the assertion does not exist or belongs to another tenant.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

404 response of POST /api/integrations/denwen-msp/v1/launch

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

{
  "error": {
    "code": "not_found",
    "message": "This device is no longer in Denwen RMM."
  },
  "requestId": "req_8ae27a1f142936d5afc519fc"
}

409

forbidden: the device cannot take a session now; details.reason is device_offline, device_not_active, device_pending_approval or device_reclaim_pending; or (1.5.0) remote_control_unsupported, for mode: control on a device whose agent cannot serve a desktop (a Linux agent without remote desktop; mode: console still works); or (§15.17) recording_notice_unacknowledged: a mode: control session would be recorded under a policy that requires the operator's confirmation, and the assertion did not carry rna (this device's id) with rnh (the hash of the notice as it reads now). details.notice: "changed" when rna was right but the notice has changed since it was shown. Refused before anything is issued.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

409 response of POST /api/integrations/denwen-msp/v1/launch

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

{
  "error": {
    "code": "forbidden",
    "details": {
      "reason": "device_offline"
    },
    "message": "The device is offline."
  },
  "requestId": "req_f3f69a4f8bcc271b49d8c75e"
}

410

integration_disabled: the integration client is disabled in the RMM. Stop until an administrator re-enables it.

• X-Request-Id: Correlates the request; equals requestId in an error body.

410 response of POST /api/integrations/denwen-msp/v1/launch

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

429

rate_limited: over 12 launches per Denwen MSP user or 60 per integration per 60 s. Retry after Retry-After seconds.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• Retry-After: Seconds to wait before retrying.
• X-Request-Id: Correlates the request; equals requestId in an error body.

429 response of POST /api/integrations/denwen-msp/v1/launch

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

500

internal: unexpected. Retry with backoff.

• X-Request-Id: Correlates the request; equals requestId in an error body.

500 response of POST /api/integrations/denwen-msp/v1/launch

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

503

unavailable: Connect is temporarily unavailable. Retry after Retry-After if present.

• X-Request-Id: Correlates the request; equals requestId in an error body.

503 response of POST /api/integrations/denwen-msp/v1/launch

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

curl -X POST "https://<your instance>/api/integrations/denwen-msp/v1/launch" \
  -H "Authorization: Bearer <your key>" \
  -H "Content-Type: application/json" \
  -d '{ … }'

GET/api/integrations/denwen-msp/v1/ping

Prove the key and name the tenant

• stable
• Integration key
• Scope: read
• Contract 1.10.0
• denwenMspPing

Used for "Test connection" and for pinning tenant.accountRef. serverTime is the real RMM clock (use it, not a listing watermark, to measure clock skew). features.connect reports whether Connect is configured and (1.3.0) which viewers a launch may ask for in clients (contract §6.1, §15.16). (1.4.0) features.actions reports which ticket actions may be asked for and their MFA and notice rules (§18), and features.help whether tray help requests are on and the state of the portal link (§19, §20).

Responses

200

The key works.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• X-Request-Id: Correlates the request; equals requestId in an error body.

200 response of GET /api/integrations/denwen-msp/v1/ping

Field	Type	Description
contractVersion required	string	The contract version the RMM serves (1.10.0).
features required	object
features.actions required	object	Ticket actions (1.4, additive; contract §18).
features.actions.kinds required	array of "script" | "reboot" | "patch_scan" | "diagnostics"	The action kinds this integration may ask for (§18.1). Offer only these.
features.actions.maxOutputBytes required	integer	result.stdout and result.stderr are each cut to this many bytes.
features.actions.mfaMaxAgeMin required	integer
features.actions.outputToFlowmsp required	boolean	Whether action output is sent to Denwen MSP. False: actions report exit code, summary and state only, never output. (Denwen MSP, formerly FlowMSP: the field name keeps its contract v1 name, and the RMM sends only this name.)
features.actions.rebootNoticeSeconds required	object	The notice a reboot gives a signed-in user, in seconds; a lower noticeSeconds is raised to min.
features.actions.rebootNoticeSeconds.default required	integer
features.actions.rebootNoticeSeconds.max required	integer
features.actions.rebootNoticeSeconds.min required	integer
features.actions.requiresMfa required	boolean	The integration's "MFA required" setting (on by default; turned off only by a pairing actor). While true, script, reboot and diagnostics need trusted Denwen MSP MFA no older than mfaMaxAgeMin; while false, no kind does.
features.actions.state required	"enabled" | "disabled" | "not_configured"	not_configured: no Connect issuer or signing key (the action assertion needs them). disabled: off for this integration, or suspended platform-wide.
features.alerts required	object	Alerts to tickets (1.2, additive).
features.alerts.categories required	array of string	Empty means every category.
features.alerts.enabledAt required	string (date-time) | null
features.alerts.infrastructure required	boolean	§16.11: this integration's "Also send hypervisor and website/port check alerts" (off by default). While true, alerts with site: null and an asset are sent.
features.alerts.infrastructureKinds required	array of "hypervisor" | "uptime"	§16.11 (1.8.0, additive): the deviceless alert kinds this RMM can send. Absent on an older RMM.
features.alerts.minSeverity required	"warning" | "critical"
features.alerts.resolveOnTicketClose required	boolean
features.alerts.state required	"enabled" | "disabled"
features.connect required	object	Connect and SSO (1.1, additive).
features.connect.clients required	array of "native" | "web"	1.3.0: the viewers a launch may ask for (client). web is listed only while the RMM has released its web viewer; offer the Web choice only then.
features.connect.mfaMaxAgeMin required	integer
features.connect.modes required	array of "control" | "console"
features.connect.recordingInConnectability required	boolean	1.7.1 (additive): POST /v1/connectability carries recording, the §15.17 answer in the same call. Read recording only while this is true.
features.connect.recordingNotice required	boolean	§15.17 (additive): the RMM serves GET /v1/devices/{deviceUid}/recording-notice and honours the launch assertion's rna / rnh (the operator's recording notice confirmation). While it is absent or false, ask nothing and send nothing.
features.connect.state required	"enabled" | "disabled" | "not_configured"	not_configured: no issuer or no signing key registered (contract §15.2).
features.connect.trustMfa required	boolean
features.externalRefs required	object	Customer references (1.10, additive; contract §23).
features.externalRefs.state required	"enabled" | "disabled"	enabled: this integration may call POST /v1/customer-refs (off by default; contract §23).
features.help required	object	Tray help requests and the portal link (1.4, additive; contract §19, §20).
features.help.portalLink required	"none" | "pending_approval" | "approved"	The tray portal link (§20): pending_approval until an RMM administrator approves the URL Denwen MSP reported.
features.help.state required	"enabled" | "disabled"	Tray help requests (§19) are being sent for this integration.
features.pathPrefixes	array of string	The v1 path prefixes this RMM serves, each reaching the same routes with the same authentication: /api/integrations/flowmsp/v1 (the original prefix, from before Denwen MSP was renamed from FlowMSP) and /api/integrations/denwen-msp/v1 (additive).
integration required	object
integration.id required	integer
integration.kind required	"flowmsp"	The integration kind: Denwen MSP. flowmsp is its contract v1 value (formerly FlowMSP), and the RMM sends only this value.
integration.status required	"active"	A disabled client answers 410 instead.
limits required	object	Informational.
limits.maxPageSize required	integer
limits.requestsPerMinute required	integer
serverTime required	string (date-time)	The RMM database clock (real time, not a watermark).
tenant required	object
tenant.accountRef required	string	The RMM tenant (TNT- + 6, immutable). Pin it.
tenant.name required	string

{
  "contractVersion": "1.10.0",
  "features": {
    "actions": {
      "kinds": [
        "script",
        "reboot",
        "patch_scan"
      ],
      "maxOutputBytes": 16384,
      "mfaMaxAgeMin": 30,
      "outputToFlowmsp": true,
      "rebootNoticeSeconds": {
        "default": 300,
        "max": 900,
        "min": 300
      },
      "requiresMfa": true,
      "state": "enabled"
    },
    "alerts": {
      "categories": [],
      "enabledAt": "2026-10-22T08:00:00.000Z",
      "infrastructure": false,
      "infrastructureKinds": [
        "hypervisor",
        "uptime"
      ],
      "minSeverity": "warning",
      "resolveOnTicketClose": true,
      "state": "enabled"
    },
    "connect": {
      "clients": [
        "native",
        "web"
      ],
      "mfaMaxAgeMin": 480,
      "modes": [
        "control",
        "console"
      ],
      "recordingInConnectability": true,
      "recordingNotice": true,
      "state": "enabled",
      "trustMfa": true
    },
    "externalRefs": {
      "state": "enabled"
    },
    "help": {
      "portalLink": "approved",
      "state": "enabled"
    },
    "pathPrefixes": [
      "/api/integrations/flowmsp/v1",
      "/api/integrations/denwen-msp/v1"
    ]
  },
  "integration": {
    "id": 7,
    "kind": "flowmsp",
    "status": "active"
  },
  "limits": {
    "maxPageSize": 500,
    "requestsPerMinute": 120
  },
  "serverTime": "2026-11-06T15:53:06.388Z",
  "tenant": {
    "accountRef": "TNT-4K7QP2",
    "name": "Acme MSP"
  }
}

401

unauthorized: the Authorization header is missing, or the key is malformed, unknown, has the wrong secret, or is revoked or expired (the message says which). Do not retry; surface to an administrator.

• X-Request-Id: Correlates the request; equals requestId in an error body.

401 response of GET /api/integrations/denwen-msp/v1/ping

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

403

forbidden: the key is not an integration key paired with Denwen MSP, or the RMM tenant is suspended. Do not retry.

• X-Request-Id: Correlates the request; equals requestId in an error body.

403 response of GET /api/integrations/denwen-msp/v1/ping

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

410

integration_disabled: the integration client is disabled in the RMM. Stop until an administrator re-enables it.

• X-Request-Id: Correlates the request; equals requestId in an error body.

410 response of GET /api/integrations/denwen-msp/v1/ping

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

429

rate_limited: over 120 requests per integration per fixed 60 s window. Retry after Retry-After seconds.

• RateLimit-Limit: The budget applied to this request, per fixed window.
• RateLimit-Remaining: Requests left in the current window.
• RateLimit-Reset: Seconds until the window resets.
• Retry-After: Seconds to wait before retrying.
• X-Request-Id: Correlates the request; equals requestId in an error body.

429 response of GET /api/integrations/denwen-msp/v1/ping

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.

500

internal: unexpected. Retry with backoff.

• X-Request-Id: Correlates the request; equals requestId in an error body.

500 response of GET /api/integrations/denwen-msp/v1/ping

Field	Type	Description
error required	object
error.code required	enum (9 values)
error.details	map of any
error.message required	string
requestId required	string	Also sent as the X-Request-Id response header.