# Sites · Reference

> The client’s sites and their zones.

Page: https://safeonuba.com/en/developers/reference/sites · SafeOnuba API v1 (`api_version: "2026-09-24"`), in preview: the contract may change.

## The client’s sites

`GET /v1/sites` · any token · [see it on the web](https://safeonuba.com/en/developers/reference/sites#listSites)

### Responses

- `200`: Sites the client can access. → `SiteList` (`application/json`)
- `401`: The token is missing, has expired or has been revoked. → `Problem` (`application/problem+json`)
- `403`: The token lacks the scope the route requires, or the site doesn’t belong to the client. → `Problem` (`application/problem+json`)
- `429`: Too many requests, or too much query time: each client has a number of requests per minute (600 by default) and a query time per minute (30 s by default), and each request spends however long it takes, so a long list counts for more than a single alert. `Retry-After` says when to retry. → `Problem` (`application/problem+json`)

### Example request (sandbox)

```bash
curl "https://sandbox.api.safeonuba.com/v1/sites" \
  -H "Authorization: Bearer $SAFEONUBA_TOKEN"
```

### Example response (`200`)

```json
{
  "data": [
    {
      "id": "0f6c2b7e-3a1d-4c55-9b0e-7d2f4a8c1e90",
      "name": "Planta Ejemplo — simulación",
      "location": "Polígono industrial de ejemplo",
      "privacy_mode": "on_demand",
      "unveil_min_severity": "low"
    }
  ]
}
```

## A site’s zones and muster points

`GET /v1/sites/{id}/zones` · scope `alerts:read` · [see it on the web](https://safeonuba.com/en/developers/reference/sites#listSiteZones)

GeoJSON in WGS84. Privacy zones come with name and type but no geometry.

### Path parameters

- `id` (string (uuid), required): Site id.

### Responses

- `200`: Zones in force. → `ZoneList` (`application/json`)
- `401`: The token is missing, has expired or has been revoked. → `Problem` (`application/problem+json`)
- `403`: The token lacks the scope the route requires, or the site doesn’t belong to the client. → `Problem` (`application/problem+json`)
- `404`: The site doesn’t exist or doesn’t belong to the client. → `Problem` (`application/problem+json`)
- `429`: Too many requests, or too much query time: each client has a number of requests per minute (600 by default) and a query time per minute (30 s by default), and each request spends however long it takes, so a long list counts for more than a single alert. `Retry-After` says when to retry. → `Problem` (`application/problem+json`)

### Example request (sandbox)

```bash
curl "https://sandbox.api.safeonuba.com/v1/sites/0f6c2b7e-3a1d-4c55-9b0e-7d2f4a8c1e90/zones" \
  -H "Authorization: Bearer $SAFEONUBA_TOKEN"
```

### Example response (`200`)

```json
{
  "data": [
    {
      "id": "f6040b41-be81-4bf3-af68-bfaf3e284c54",
      "name": "Punto de reunión PR-3 · Zona alta",
      "type": "assembly_point",
      "geometry": {
        "type": "Polygon",
        "coordinates": [
          [
            [
              -2.9825,
              40.0081
            ],
            [
              -2.9818,
              40.0081
            ],
            [
              -2.9818,
              40.0076
            ],
            [
              -2.9825,
              40.0076
            ],
            [
              -2.9825,
              40.0081
            ]
          ]
        ]
      },
      "assembly_point": {
        "serves": [
          "general",
          "tsunami"
        ],
        "elevation_m": 50,
        "elevation_source": "verified",
        "vertical": false,
        "capacity": 200
      }
    }
  ]
}
```