NomadMD API
How to get API access, authenticate with your key, and call the NomadMD GraphQL API.
Related guide
In this article
Before you start
NomadMD has a GraphQL API: the same API the dashboard uses. It's for developers connecting NomadMD to your own systems.
- Endpoint: https://api.nomadmd.app/graphql
- Access: contact NomadMD support to request an API key. Keys are tied to a user and limited to the roles you need.
Step 1: Get a key
- Generate a key pair on your side (for example an EC P-256 key). Keep the private key secret.
- Send NomadMD the public key. We register it and give you its key ID (kid).
Step 2: Authenticate
- For each request (or each short session), sign a short-lived JWT with your private key, with the key ID in the JWT header as
kid. - Send it in the header:
Authorization: Bearer <your JWT>.
Step 3: Make a call
POST a GraphQL query to the endpoint. Every call is checked against the roles on your key, so you only see and change what those roles allow.
Tips
- Ask for the narrowest roles that do the job.
- Prefer an AI assistant to scripts? See MCP Connector.
- Rotate keys by registering a new public key and retiring the old one.
See NomadMD in action
Book a quick demo and we'll walk you through it for your practice.