---
title: "System overview"
method: GET
path: "/v1/org/overview"
tags: ["Organization"]
---

# System overview

`GET /v1/org/overview`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/org/overview`
- Auth: HTTP bearer

The whole org in one call: inventory (vaults, secrets, agents, runtimes,
automations, bindings, policies, wallets, apps, members), activity in the last
`hours` (secret reads/writes, denials, executions, transactions, Shroud
requests/blocked/redacted/injections, automation runs, approvals, consensus,
risk events, API requests), spend (inference, executions, automations, credit
balance), health (expiring secrets, stale/suspended/unpoliced agents, failing
automations, errored runtimes, overdue approvals) and a 7-day trend. Human and
platform callers only. Backs the dashboard's Overview tab.

## Query parameters

- `hours` integer

## Response `200`

Overview

- OrgOverview
  - `generated_at` string, date-time, required
  - `window_hours` integer, required
  - `inventory` object, required: vaults, secrets, agents_total, agents_active, child_agents, runtimes_total, runtimes_running, automations_total, automations_active, bindings, policies, treasury_wallets, signing_keys, platform_apps, connected_apps, team_members
  - `activity` object, required: audit_events, secret_reads, secret_writes, policy_denials, executions, execution_failures, transactions, transactions_failed, shroud_requests, shroud_blocked, shroud_redacted, shroud_injections, automation_runs, automation_runs_failed, automation_runs_parked, approvals_pending, approvals_decided, consensus_pending, risk_events, threats_open, api_requests
  - `spend` object, required
    - `inference_usd` number
    - `inference_tokens` integer
    - `execution_cost_cents` integer
    - `automation_cost_cents` integer
    - `credit_balance_micro_usd` integer
    - `billing_tier` string
  - `health` object, required: secrets_expiring_7d, stale_agents, agents_without_policy, automations_failing, runtimes_errored, approvals_overdue, agents_suspended
  - `trend` object[], required
    - `day` string, date
    - `audit_events` integer
    - `denials` integer
    - `shroud_requests` integer
    - `shroud_blocked` integer
    - `automation_runs` integer
    - `transactions` integer

## Other responses

- `401`: Authentication required or invalid
- `403`: Insufficient permissions

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/5fa0918f3b41?raw)