Admin API: Reload, Stats, and Config Endpoints

The admin endpoints give you operational control over a running InferenceWall instance: hot-reload configuration without downtime, view request statistics, and inspect the active runtime settings.

All admin endpoints require the admin API key (iwk_admin_ prefix). Requests made with a scan key return 401 Unauthorized.

POST /v1/admin/reload

Hot-reload signatures and policies from disk without restarting the server. Use this after adding custom signatures or changing your policy file — changes take effect immediately.

Example

curl -X POST http://localhost:8000/v1/admin/reload \
  -H "Authorization: Bearer iwk_admin_YOUR_KEY"

{
  "status": "ok",
  "signature_count": 102,
  "message": "Signatures and policies reloaded successfully."
}

After calling /v1/admin/reload, confirm the changes by calling GET /v1/signatures to verify your new signatures appear, or GET /v1/policies to verify threshold changes.

GET /v1/admin/stats

Retrieve system statistics for the running instance, including request counts, decision distribution, and block rates.

Example

curl http://localhost:8000/v1/admin/stats \
  -H "Authorization: Bearer iwk_admin_YOUR_KEY"

{
  "requests_total": 48210,
  "decisions": {
    "allow": 46503,
    "flag": 1291,
    "block": 416
  },
  "block_rate": 0.0086,
  "uptime_secs": 86400
}

Response fields

number

Total number of scan requests processed since the server started.

object

Breakdown of decisions by verdict.

Show decisions properties

number

Number of requests that received an allow decision.

number

Number of requests that received a flag decision.

number

Number of requests that received a block decision.

number

Fraction of all requests that resulted in a block decision (0.0–1.0).

number

Server uptime in seconds since the last start.

GET /v1/config

Read the active runtime configuration, including environment variable values and resolved settings.

Example

curl http://localhost:8000/v1/config \
  -H "Authorization: Bearer iwk_admin_YOUR_KEY"

{
  "host": "0.0.0.0",
  "port": 8000,
  "profile": "standard",
  "log_level": "info",
  "tls": "off",
  "signatures_dir": "/home/user/.inferwall/signatures",
  "policy_path": "/home/user/.inferwall/policies/my-policy.yaml",
  "redis_url": null
}

Response fields

string

The host address InferenceWall is bound to (IW_HOST).

number

The port InferenceWall is listening on (IW_PORT).

string

The active deployment profile: lite, standard, or full (IW_PROFILE).

string

The active log level (IW_LOG_LEVEL).

string

TLS mode: auto, off, or a path to a certificate (IW_TLS).

string

Resolved path to the custom signatures directory (IW_SIGNATURES_DIR).

string

Resolved path to the active policy file (IW_POLICY_PATH).

string

Redis URL for distributed sessions, or null if not configured (IW_REDIS_URL).

​POST /v1/admin/reload

​Example

​GET /v1/admin/stats

​Example

​Response fields

​GET /v1/config

​Example

​Response fields

POST /v1/admin/reload

Example

GET /v1/admin/stats

Example

Response fields

GET /v1/config

Example

Response fields