# Blameless

> Blameless was an SRE and incident management platform — incident response, blameless
> retrospectives, SLOs and error budgets. FireHydrant acquired Blameless on 2024-08-21 and
> has since absorbed it. As of 2026-08-29 there is no live Blameless API: www.blameless.com
> redirects to firehydrant.com, docs.blameless.com has no DNS record, and the
> <instance>.blameless.io tenant hosts the API used no longer resolve. This file is a
> historical record generated by API Evangelist from probed evidence, not a provider
> publication.

Generated: 2026-08-29
Method: generated (from probes + the API Evangelist catalog entry for blameless)
Source repository: https://github.com/api-evangelist/blameless

## Status

- Acquired by FireHydrant, announced 2024-08-21 (undisclosed terms).
- API status: retired. No machine-readable contract was ever published — no OpenAPI,
  AsyncAPI or GraphQL SDL exists on any Blameless host, past or present.
- Successor surface: https://firehydrant.com/ — docs at https://docs.firehydrant.com/

## What was reachable on 2026-08-29

- https://github.com/blamelesshq — 200. The organization is still public: 10 repositories,
  4 archived.
- https://blamelesshq.auth0.com/.well-known/openid-configuration — 200. Blameless' Auth0
  identity tenant still serves a full OIDC discovery document.
- https://registry.terraform.io/providers/blamelesshq/blameless/latest — 200.
- https://www.npmjs.com/package/@blamelesshq/blameless-slo — package live on the registry.
- https://www.blameless.com/ — 302 to https://firehydrant.com/ (every path).
- https://docs.blameless.com/ — no DNS record.
- https://api.blameless.io/ — no DNS record.

## The API, as it was

Base URL was tenant-templated: https://{instance}.blameless.io/api/v1
Two path shapes existed.

- Attested in Blameless' own published client code (fetched from github.com/blamelesshq,
  2026-08-29): /api/v1/incident-severities, /api/v1/identity/tenant,
  /api/v1/identity/user/authName/{name}, /api/v1/prometheus/settings, and the RPC form
  POST /api/v1/services/{Service}/{Method} with services SLOServiceCrud and
  SLOTimeSeriesServiceCrud.
- Documented on the removed reference and recoverable only from search-engine memory of
  docs.blameless.com/api/api-reference/* (the host itself returns nothing):
  /api/v1/incidents, /api/v1/incidents/{incidentId},
  /api/v1/incidents/{incidentId}/events. Treat these as low-confidence — they could not be
  verified against a live page.

Authentication: Auth0 machine-to-machine client credentials
(https://blamelesshq.auth0.com/oauth/token, grant_type client_credentials, audience set to
the tenant host), presented to the API as an Authorization: Bearer header. The Terraform
provider used an instance URL plus an API key (BLAMELESS_INSTANCE / BLAMELESS_KEY).
Credentials were not self-service — Customer Success issued them.
Authorization was rule-based (named rules such as IncidentRead); that rule catalogue was
published only on docs.blameless.com and is not recoverable.

## First-party packages

- @blamelesshq/blameless-slo — npm, 1.0.9, published 2022-09-13. The Blameless SLO CLI:
  validate / deploy / delete for SLO resources. https://github.com/blamelesshq/blameless-openslo
- @blamelesshq/blameless-backstage — npm, 0.1.30, published 2024-04-11. Backstage backend
  plugin pushing catalog entities into Blameless. https://github.com/blamelesshq/backstage-plugin
- blamelesshq/blameless — Terraform Registry, 0.0.4-rc5, published 2024-04-19, 10,523
  downloads. Resources: blameless_organization, blameless_incident_severities,
  blameless_incident_roles, blameless_incident_type.
  https://github.com/blamelesshq/terraform-provider-blameless

Nothing has been republished to any registry since 2024-04-19.

## SLO specification dialect

The Blameless SLO CLI consumes OpenSLO-shaped YAML — kinds Service, SLI, SLO, UserJourney
and ErrorBudgetPolicy, with ratioMetric (good/total) and thresholdMetric (op/value) — but
every published spec file declares `apiVersion: blameless/v1alpha` rather than an OpenSLO
apiVersion. The files are therefore not portable to OpenSLO-conformant tooling.

## Artifacts in this repository

- packages/blameless-packages.yml — registry inventory with versions and publication dates
- cli/blameless-cli.yml — the blameless-slo command surface
- authentication/blameless-authentication.yml — OAuth2/bearer/API-key profile
- scopes/blameless-scopes.yml — the Auth0 tenant's advertised OIDC scopes
- conformance/blameless-conformance.yml — OAuth2, OIDC, RFC 8414, PKCE, OpenSLO (partial)
- lifecycle/blameless-lifecycle.yml — acquisition, wind-down and host evidence
- well-known/blameless-well-known.yml — the /.well-known probe, including the two 200s
- plans/blameless-plans-pricing.yml — no published plans (0)
- rate-limits/blameless-rate-limits.yml — no published limits (0)
- security/blameless-domain-security.yml — TLS/HSTS/SPF/DMARC probe of blameless.com

## Not published

No llms.txt, no MCP server, no A2A agent card, no security.txt, no status page, no
changelog, no Postman collection, no sandbox, no webhook or event catalogue.