For Researcher & Business subscribers

API

Query everything on this site from your own code. You can filter releases across the whole watchlist, pull a tool's SBOM or recorded CLI examples directly, and read the analytics charts as data instead of images. There are 16 endpoints, versioned under /v1/. Interpret each measure within its stated population and observation period; unavailable evidence does not mean a measured zero.

The free RSS and OPML feeds are a separate thing that needs no key and stays free, while the API adds real filtering and search, analytics that aren't public, and tool-level data the feeds don't carry.

Subscribe to Researcher Already a subscriber? Generate a key →

Getting started

Generate a key from your account page — it's shown once, so store it when you make it. Send it as x-api-key on every request; there's no Authorization header here, since CloudFront's origin signing overwrites it before it would reach the API.

The base path carries the version (/v1/) — a breaking change gets /v2/ rather than changing what's already there out from under a running script. Each key can make 50,000 requests in any 24 hours, and the API and MCP share that limit. Going over it returns 429 until the window resets. A missing or revoked key gets 401.

curl

export API_KEY=ctk_your_key_here

curl -H "x-api-key: $API_KEY" \
  https://d3hvv6ete0783d.cloudfront.net/v1/tools/count

Tools

5 endpoints

The watchlist itself — what's tracked, what each tool is, and what it has shipped.

GET /v1/tools/count any key

Just the number — for a status badge or a monitoring check that shouldn't have to page through the full list.

Query parameters

Name	Type	Description
category / license / tool_type	—	Same filters as /v1/tools, for a scoped count instead of the total.

Example

curl

curl -H "x-api-key: $API_KEY" \
  https://d3hvv6ete0783d.cloudfront.net/v1/tools/count

200 OK

{
  "total": 836,
  "generated_at": "2026-08-14"
}

{2 keys}

"total": 836,

"generated_at": "2026-08-14"

GET /v1/tools any key

Every tracked tool, with the metadata already published on the tools page.

Query parameters

Name	Type	Description
category	string	Taxonomy slug, e.g. cloud-security.
license	enum	open-source or commercial.
tool_type	enum	cli / library / server / web / mobile / gui / hardware / rules / os / model / skill. A tool can ship in several forms; the filter matches a tool that has this one anywhere in its list.
q	string	Matches tool name or vendor.
cursor / limit	string / int	Pagination. Default limit 50, max 200.

Example

curl

curl -H "x-api-key: $API_KEY" \
  "https://d3hvv6ete0783d.cloudfront.net/v1/tools?limit=2"

200 OK

{
  "tools": [
    {
      "name": "Nmap",
      "display": "Nmap",
      "category": "reconnaissance",
      "vendor": null,
      "tool_type": [
        "cli"
      ],
      "tags": [
        "network-scanning",
        "port-scanning",
        "service-detection",
        "os-fingerprinting"
      ],
      "repo": "nmap/nmap",
      "url": null,
      "docs_url": "https://nmap.org/book/man.html",
      "changelog_url": "https://nmap.org/changelog.html",
      "website": null,
      "adapter": "github",
      "open_source": null,
      "license": "oss",
      "launched": null,
      "added": "2026-06-24",
      "retired": false,
      "slug": "nmap"
    },
    {
      "name": "Falco",
      "display": "Falco",
      "category": "runtime-security",
      "vendor": null,
      "tool_type": [
        "server",
        "cli"
      ],
      "tags": [
        "ebpf",
        "runtime-detection",
        "syscall-monitoring",
        "kubernetes"
      ],
      "repo": "falcosecurity/falco",
      "url": null,
      "docs_url": "https://falco.org/docs/",
      "changelog_url": "https://falco.org/docs/reference/changelog/",
      "website": null,
      "adapter": "github",
      "open_source": null,
      "license": "oss",
      "launched": null,
      "added": "2026-07-02",
      "retired": false,
      "slug": "falco"
    }
  ],
  "total": 2,
  "next_cursor": null
}

{3 keys}

"tools":

[2 items]

{18 keys}

"name": "Nmap",

"display": "Nmap",

"category": "reconnaissance",

"vendor": null,

"tool_type":

[1 item]

"cli"

"tags":

[4 items]

"network-scanning",

"port-scanning",

"service-detection",

"os-fingerprinting"

"repo": "nmap/nmap",

"url": null,

"docs_url": "https://nmap.org/book/man.html",

"changelog_url": "https://nmap.org/changelog.html",

"website": null,

"adapter": "github",

"open_source": null,

"license": "oss",

"launched": null,

"added": "2026-06-24",

"retired": false,

"slug": "nmap"

{18 keys}

"name": "Falco",

"display": "Falco",

"category": "runtime-security",

"vendor": null,

"tool_type":

[2 items]

"server",

"cli"

"tags":

[4 items]

"ebpf",

"runtime-detection",

"syscall-monitoring",

"kubernetes"

"repo": "falcosecurity/falco",

"url": null,

"docs_url": "https://falco.org/docs/",

"changelog_url": "https://falco.org/docs/reference/changelog/",

"website": null,

"adapter": "github",

"open_source": null,

"license": "oss",

"launched": null,

"added": "2026-07-02",

"retired": false,

"slug": "falco"

"total": 2,

"next_cursor": null

GET /v1/tools/{slug} any key

One tool in full, including its most recent release.

Parameters

Name	Type	Description
slug	path	Same slug the site uses at /tools/{slug}.

Example

curl

curl -H "x-api-key: $API_KEY" \
  https://d3hvv6ete0783d.cloudfront.net/v1/tools/nmap

200 OK

{
  "name": "Nmap",
  "display": "Nmap",
  "category": "reconnaissance",
  "vendor": null,
  "tool_type": [
    "cli"
  ],
  "tags": [
    "network-scanning",
    "port-scanning",
    "service-detection",
    "os-fingerprinting"
  ],
  "repo": "nmap/nmap",
  "url": null,
  "docs_url": "https://nmap.org/book/man.html",
  "changelog_url": "https://nmap.org/changelog.html",
  "website": null,
  "adapter": "github",
  "open_source": null,
  "license": "oss",
  "launched": null,
  "added": "2026-06-24",
  "retired": false,
  "slug": "nmap",
  "latest_release": {
    "tool": "Nmap",
    "category": "reconnaissance",
    "version": "commits-2026-07-11",
    "published_at": "2026-08-09T22:03:18+00:00",
    "url": "https://github.com/nmap/nmap/compare/49a85f9c3c11...115af39aacf9",
    "summary": "Nmap gains TLS close_notify tolerance, SSL service portrule coverage, and signal propagation to child processes with `-k`.",
    "feature_bullets": [
      "Adds `-k` signal propagation: termination signals (INT/TERM/HUP) are now caught and forwarded to the entire process group, then Ncat exits with `128 + signum`.",
      "NSE scripts now include `s` (SSL-protected) service names in their portrules, so scripts run against SSL-wrapped services too.",
      "Nmap now tolerates TLS peers that do not send `close_notify`, preventing spurious scan failures against non-compliant TLS targets.",
      "`http-referer-checker` now categorizes but does not fetch off-host URLs, limiting requests to the target host only."
    ],
    "breaking_changes": [],
    "usage_examples": [
      {
        "description": "Specify an interface with -e to bind both the outgoing interface and the source address.",
        "command": "nmap -e eth1 -S 192.168.1.50 <target>",
        "language": "",
        "kind": "shell"
      }
    ],
    "signal_kind": "activity",
    "prerelease": false,
    "is_latest": false
  },
  "has_api_surface": false,
  "has_cli_surface": true
}

{21 keys}

"name": "Nmap",

"display": "Nmap",

"category": "reconnaissance",

"vendor": null,

"tool_type":

[1 item]

"cli"

"tags":

[4 items]

"network-scanning",

"port-scanning",

"service-detection",

"os-fingerprinting"

"repo": "nmap/nmap",

"url": null,

"docs_url": "https://nmap.org/book/man.html",

"changelog_url": "https://nmap.org/changelog.html",

"website": null,

"adapter": "github",

"open_source": null,

"license": "oss",

"launched": null,

"added": "2026-06-24",

"retired": false,

"slug": "nmap",

"latest_release":

{12 keys}

"tool": "Nmap",

"category": "reconnaissance",

"version": "commits-2026-07-11",

"published_at": "2026-08-09T22:03:18+00:00",

"url": "https://github.com/nmap/nmap/compare/49a85f9c3c11...115af39aacf9",

"summary": "Nmap gains TLS close_notify tolerance, SSL service portrule coverage, and signal propagation to child processes with `-k`.",

"feature_bullets":

[4 items]

"Adds `-k` signal propagation: termination signals (INT/TERM/HUP) are now caught and forwarded to the entire process group, then Ncat exits with `128 + signum`.",

"NSE scripts now include `s` (SSL-protected) service names in their portrules, so scripts run against SSL-wrapped services too.",

"Nmap now tolerates TLS peers that do not send `close_notify`, preventing spurious scan failures against non-compliant TLS targets.",

"`http-referer-checker` now categorizes but does not fetch off-host URLs, limiting requests to the target host only."

"breaking_changes": [],

"usage_examples":

[1 item]

{4 keys}

"description": "Specify an interface with -e to bind both the outgoing interface and the source address.",

"command": "nmap -e eth1 -S 192.168.1.50 <target>",

"language": "",

"kind": "shell"

"signal_kind": "activity",

"prerelease": false,

"is_latest": false

"has_api_surface": false,

"has_cli_surface": true

GET /v1/tools/{slug}/source-events any key

Reviewed source excerpts for current capabilities, upcoming work, problems, usage or direction. Missing evidence is a sample gap.

Parameters

Name	Type	Description
slug	path	Required registered tool slug.
question	query	now (default), coming, problems, usage or direction.

Example

Ask what the reviewed sources say is available

curl -H "x-api-key: $API_KEY" \
  "https://d3hvv6ete0783d.cloudfront.net/v1/tools/nmap/source-events?question=now"

Local reviewed sample; source dates and runtime limits stay explicit

{
  "tool": "nmap",
  "question": "now",
  "events": [
    {
      "event_id": "6f547e54adcabce8b8ab8427a3d86a8681a6f7f30aeaa41fe331bce94bddf9a5",
      "tool": "nmap",
      "event_slug": "documented-version-detection",
      "questions": [
        "now",
        "usage"
      ],
      "ordering": "authored-date; same-day and missing-date order unknown",
      "observations": [
        {
          "captured_at": "2026-10-14T06:19:53Z",
          "channel": "documentation",
          "content_hash": "6dfa8ec9a495e407ad2980656f9aa324df4ae949b0c66f76c0cd81953af391be",
          "context_complete": false,
          "evidence_id": "8ff29ad1192b372e1d09986d8d2783cb900853cc2354baa2efba86d85c83064e",
          "locator": "body",
          "quote": "If Nmap was compiled with OpenSSL support, it will connect to SSL servers to deduce the service listening behind that encryption layer.",
          "scope": "Conditional SSL service detection requires OpenSSL build support; not all services yield all information",
          "source_content_hash": "aac6410cc723c56ce298435728db5fc0448af6a8f3fdabe303fa3e0f4a9d1487",
          "source_role": "unverified",
          "source_unit_id": "b87fd702b95879b89e1ec74b44e0e51704a0cd372052bb71e2473e6488e44d9c",
          "status": "unconfirmed",
          "url": "https://nmap.org/book/man-version-detection.html"
        },
        {
          "captured_at": "2026-10-14T06:19:53Z",
          "channel": "documentation",
          "content_hash": "6dfa8ec9a495e407ad2980656f9aa324df4ae949b0c66f76c0cd81953af391be",
          "context_complete": false,
          "evidence_id": "d797b29eee4acf9963279f7c327f4c1ecbf1f4755f1539d09ab37e594d6fc665",
          "locator": "body",
          "quote": "-sV (Version detection)\n\n Enables version detection, as discussed above.",
          "scope": "Documented version-detection option; manual names no exact release; no local execution verified",
          "source_content_hash": "aac6410cc723c56ce298435728db5fc0448af6a8f3fdabe303fa3e0f4a9d1487",
          "source_role": "unverified",
          "source_unit_id": "b87fd702b95879b89e1ec74b44e0e51704a0cd372052bb71e2473e6488e44d9c",
          "status": "unconfirmed",
          "url": "https://nmap.org/book/man-version-detection.html"
        }
      ],
      "observations_truncated": false
    },
    {
      "event_id": "8fd344e5cf6221df00e198706e4fc820480e4c474c9f16d39c6df4b9c7bec340",
      "tool": "nmap",
      "event_slug": "release-7-991",
      "questions": [
        "now",
        "usage"
      ],
      "ordering": "authored-date; same-day and missing-date order unknown",
      "observations": [
        {
          "captured_at": "2026-10-14T06:20:16Z",
          "channel": "release",
          "content_hash": "eac5e035146aeb5ea29da0c601b538bf8cea6f68cea7885237060fd71672c52b",
          "context_complete": false,
          "evidence_id": "09d2dab72508ce2fe68f024b9c6c40b68735cd12cf61a2773b999547a8c4f60f",
          "locator": "body",
          "quote": "Latest stable release self-installer: nmap-7.991-setup.exe",
          "scope": "Official Windows release listing; package not downloaded or executed; no feature-membership inference",
          "shipped_in": "7.991",
          "source_content_hash": "f7a141827569156dcc86c5c73e6118d317735f70846c7cd554c1a28a3d51e1a9",
          "source_role": "unverified",
          "source_unit_id": "8cf2e93de520f9c653aa038ea2294bfe11d3e67df0277aba3a6ba37eba5aa91f",
          "status": "shipped",
          "url": "https://nmap.org/download.html"
        },
        {
          "captured_at": "2026-10-14T06:20:16Z",
          "channel": "release",
          "content_hash": "eac5e035146aeb5ea29da0c601b538bf8cea6f68cea7885237060fd71672c52b",
          "context_complete": false,
          "evidence_id": "6f14ada9884b0ed80a4b3f69ba19b09b901f7a22186dd7ce350ab32e42a141f7",
          "locator": "body",
          "quote": "Latest stable release installer: nmap-7.991.dmg",
          "scope": "Official macOS stable release listing; installer not downloaded or executed; no native SwiftUI shipment inference",
          "shipped_in": "7.991",
          "source_content_hash": "f7a141827569156dcc86c5c73e6118d317735f70846c7cd554c1a28a3d51e1a9",
          "source_role": "unverified",
          "source_unit_id": "8cf2e93de520f9c653aa038ea2294bfe11d3e67df0277aba3a6ba37eba5aa91f",
          "status": "shipped",
          "url": "https://nmap.org/download.html"
        },
        {
          "captured_at": "2026-10-14T06:20:16Z",
          "channel": "release",
          "content_hash": "eac5e035146aeb5ea29da0c601b538bf8cea6f68cea7885237060fd71672c52b",
          "context_complete": false,
          "evidence_id": "b8ae9e282bdd99b85262d29331561084dd2ce96b1ce1a66a343cd83c8692fcb6",
          "locator": "body",
          "quote": "Nmap binaries for Apple macOS (x86-64) are distributed as a disk image file containing an installer.",
          "scope": "Current official page describes x86-64 packaging; distinct from the proposed native Apple Silicon build; other distribution routes not audited",
          "source_content_hash": "f7a141827569156dcc86c5c73e6118d317735f70846c7cd554c1a28a3d51e1a9",
          "source_role": "unverified",
          "source_unit_id": "8cf2e93de520f9c653aa038ea2294bfe11d3e67df0277aba3a6ba37eba5aa91f",
          "status": "unconfirmed",
          "url": "https://nmap.org/download.html"
        }
      ],
      "observations_truncated": false
    }
  ],
  "matched_events": 2,
  "truncated": false,
  "state": "reviewed-evidence-available",
  "coverage": "bounded-reviewed-sample",
  "latest_import_content_hash": "c8edf559a2196c2ee0c00e22c6dcff7c71f55cef8fe7066208867c0f71c0afb2"
}

{8 keys}

"tool": "nmap",

"question": "now",

"events":

[2 items]

{7 keys}

"event_id": "6f547e54adcabce8b8ab8427a3d86a8681a6f7f30aeaa41fe331bce94bddf9a5",

"tool": "nmap",

"event_slug": "documented-version-detection",

"questions":

[2 items]

"now",

"usage"

"ordering": "authored-date; same-day and missing-date order unknown",

"observations":

[2 items]

{13 keys}

"captured_at": "2026-10-14T06:19:53Z",

"channel": "documentation",

"content_hash": "6dfa8ec9a495e407ad2980656f9aa324df4ae949b0c66f76c0cd81953af391be",

"context_complete": false,

"evidence_id": "8ff29ad1192b372e1d09986d8d2783cb900853cc2354baa2efba86d85c83064e",

"locator": "body",

"quote": "If Nmap was compiled with OpenSSL support, it will connect to SSL servers to deduce the service listening behind that encryption layer.",

"scope": "Conditional SSL service detection requires OpenSSL build support; not all services yield all information",

"source_content_hash": "aac6410cc723c56ce298435728db5fc0448af6a8f3fdabe303fa3e0f4a9d1487",

"source_role": "unverified",

"source_unit_id": "b87fd702b95879b89e1ec74b44e0e51704a0cd372052bb71e2473e6488e44d9c",

"status": "unconfirmed",

"url": "https://nmap.org/book/man-version-detection.html"

{13 keys}

"captured_at": "2026-10-14T06:19:53Z",

"channel": "documentation",

"content_hash": "6dfa8ec9a495e407ad2980656f9aa324df4ae949b0c66f76c0cd81953af391be",

"context_complete": false,

"evidence_id": "d797b29eee4acf9963279f7c327f4c1ecbf1f4755f1539d09ab37e594d6fc665",

"locator": "body",

"quote": "-sV (Version detection) Enables version detection, as discussed above.",

"scope": "Documented version-detection option; manual names no exact release; no local execution verified",

"source_content_hash": "aac6410cc723c56ce298435728db5fc0448af6a8f3fdabe303fa3e0f4a9d1487",

"source_role": "unverified",

"source_unit_id": "b87fd702b95879b89e1ec74b44e0e51704a0cd372052bb71e2473e6488e44d9c",

"status": "unconfirmed",

"url": "https://nmap.org/book/man-version-detection.html"

"observations_truncated": false

{7 keys}

"event_id": "8fd344e5cf6221df00e198706e4fc820480e4c474c9f16d39c6df4b9c7bec340",

"tool": "nmap",

"event_slug": "release-7-991",

"questions":

[2 items]

"now",

"usage"

"ordering": "authored-date; same-day and missing-date order unknown",

"observations":

[3 items]

{14 keys}

"captured_at": "2026-10-14T06:20:16Z",

"channel": "release",

"content_hash": "eac5e035146aeb5ea29da0c601b538bf8cea6f68cea7885237060fd71672c52b",

"context_complete": false,

"evidence_id": "09d2dab72508ce2fe68f024b9c6c40b68735cd12cf61a2773b999547a8c4f60f",

"locator": "body",

"quote": "Latest stable release self-installer: nmap-7.991-setup.exe",

"scope": "Official Windows release listing; package not downloaded or executed; no feature-membership inference",

"shipped_in": "7.991",

"source_content_hash": "f7a141827569156dcc86c5c73e6118d317735f70846c7cd554c1a28a3d51e1a9",

"source_role": "unverified",

"source_unit_id": "8cf2e93de520f9c653aa038ea2294bfe11d3e67df0277aba3a6ba37eba5aa91f",

"status": "shipped",

"url": "https://nmap.org/download.html"

{14 keys}

"captured_at": "2026-10-14T06:20:16Z",

"channel": "release",

"content_hash": "eac5e035146aeb5ea29da0c601b538bf8cea6f68cea7885237060fd71672c52b",

"context_complete": false,

"evidence_id": "6f14ada9884b0ed80a4b3f69ba19b09b901f7a22186dd7ce350ab32e42a141f7",

"locator": "body",

"quote": "Latest stable release installer: nmap-7.991.dmg",

"scope": "Official macOS stable release listing; installer not downloaded or executed; no native SwiftUI shipment inference",

"shipped_in": "7.991",

"source_content_hash": "f7a141827569156dcc86c5c73e6118d317735f70846c7cd554c1a28a3d51e1a9",

"source_role": "unverified",

"source_unit_id": "8cf2e93de520f9c653aa038ea2294bfe11d3e67df0277aba3a6ba37eba5aa91f",

"status": "shipped",

"url": "https://nmap.org/download.html"

{13 keys}

"captured_at": "2026-10-14T06:20:16Z",

"channel": "release",

"content_hash": "eac5e035146aeb5ea29da0c601b538bf8cea6f68cea7885237060fd71672c52b",

"context_complete": false,

"evidence_id": "b8ae9e282bdd99b85262d29331561084dd2ce96b1ce1a66a343cd83c8692fcb6",

"locator": "body",

"quote": "Nmap binaries for Apple macOS (x86-64) are distributed as a disk image file containing an installer.",

"scope": "Current official page describes x86-64 packaging; distinct from the proposed native Apple Silicon build; other distribution routes not audited",

"source_content_hash": "f7a141827569156dcc86c5c73e6118d317735f70846c7cd554c1a28a3d51e1a9",

"source_role": "unverified",

"source_unit_id": "8cf2e93de520f9c653aa038ea2294bfe11d3e67df0277aba3a6ba37eba5aa91f",

"status": "unconfirmed",

"url": "https://nmap.org/download.html"

"observations_truncated": false

"matched_events": 2,

"truncated": false,

"state": "reviewed-evidence-available",

"coverage": "bounded-reviewed-sample",

"latest_import_content_hash": "c8edf559a2196c2ee0c00e22c6dcff7c71f55cef8fe7066208867c0f71c0afb2"

GET /v1/tools/{slug}/releases any key

One tool's release history.

Parameters

Name	Type	Description
slug	path	Required.
since / until	date	ISO date bounds on published_at.
cursor / limit	string / int	Pagination.

Releases

1 endpoint

Every release across the watchlist in one feed — what Tail sends, queryable instead of mailed.

GET /v1/releases any key

Filterable across the whole watchlist, not just one tool. Newest first by when we published each release.

Query parameters

Name	Type	Description
tools	string[]	Comma-separated slugs.
categories	string[]	Comma-separated taxonomy slugs.
since / until	date	ISO date bounds.
cursor / limit	string / int	Pagination. Default limit 50, max 200.

Newsletter issues

3 endpoints

The published archive — daily, highlights, and docs-weekly.

GET /v1/issues any key

The issue index.

Query parameters

Name	Type	Description
series	enum	daily / highlights / docs-weekly.
cursor / limit	string / int	Pagination, newest first.

GET /v1/issues/{issue} any key

One issue in full — the same entries the site renders, as JSON.

Parameters

Name	Type	Description
issue	path	Issue number, e.g. 044, or docs-006 / highlights-006.

GET /v1/issues/{issue}/download any key

The same issue as a file — JSON, or a standalone HTML page.

Parameters

Name	Type	Description
issue	path	Required.
format	enum	Required. json or html.

Tool APIs

1 endpoint

What a tracked tool's own API looks like, for the tools that publish one.

GET /v1/tools/{slug}/api any key

Capability areas, endpoint count, and the most recent spec change.

Parameters

Name	Type	Description
slug	path	Required.

Code & supply chain

3 endpoints

What we learned by actually running a tool and reading its repo.

GET /v1/tools/{slug}/cli any key

Captured command-line examples, with what they actually printed.

Parameters

Name	Type	Description
slug	path	Required.

GET /v1/tools/{slug}/sbom any key

The tool's software bill of materials.

Parameters

Name	Type	Description
slug	path	Required.

GET /v1/tools/{slug}/surface any key

Language mix, dependencies, and AI-attribution stats.

Parameters

Name	Type	Description
slug	path	Required.

Analytics

1 endpoint

The charts behind /analytics, as data.

GET /v1/analytics/{chart} researcher+

One chart, full detail for Researcher and Business — masked names for everyone else, same rule as the page.

Parameters

Name	Type	Description
chart	path	velocity, notes_quality, investment, momentum, and the rest of the published set.

Examples

curl · practitioner-tier key

curl -H "x-api-key: $API_KEY" \
  https://d3hvv6ete0783d.cloudfront.net/v1/analytics/notes_quality

200 OK · withheld

{
  "chart": "notes_quality",
  "withheld": true,
  "data": {
    "tools": [
      {
        "name": "▒▒▒▒▒▒▒",
        "display": "▒▒▒▒▒▒▒",
        "category": "container-security",
        "open_source": true,
        "adapter": "github",
        "corpus": "github",
        "channel": "release",
        "channels_scored": [
          "release"
        ],
        "release_feed_empty": false,
        "score": 87,
        "depth": 47.5,
        "examples": 35,
        "transparency": 4.5,
        "notes_scored": 4,
        "zero_body_notes": 0,
        "truncated_excluded": 0,
        "bodyless_feed_items_skipped": 0
      }
    ]
  }
}

{3 keys}

"chart": "notes_quality",

"withheld": true,

"data":

{1 key}

"tools":

[1 item]

{17 keys}

"name": "▒▒▒▒▒▒▒",

"display": "▒▒▒▒▒▒▒",

"category": "container-security",

"open_source": true,

"adapter": "github",

"corpus": "github",

"channel": "release",

"channels_scored":

[1 item]

"release"

"release_feed_empty": false,

"score": 87,

"depth": 47.5,

"examples": 35,

"transparency": 4.5,

"notes_scored": 4,

"zero_body_notes": 0,

"truncated_excluded": 0,

"bodyless_feed_items_skipped": 0

curl · researcher-tier key

curl -H "x-api-key: $API_KEY" \
  https://d3hvv6ete0783d.cloudfront.net/v1/analytics/notes_quality

200 OK · full detail

{
  "chart": "notes_quality",
  "withheld": false,
  "data": {
    "tools": [
      {
        "name": "dockerscan",
        "display": "dockerscan",
        "category": "container-security",
        "open_source": true,
        "adapter": "github",
        "corpus": "github",
        "channel": "release",
        "channels_scored": [
          "release"
        ],
        "release_feed_empty": false,
        "score": 87,
        "depth": 47.5,
        "examples": 35,
        "transparency": 4.5,
        "notes_scored": 4,
        "zero_body_notes": 0,
        "truncated_excluded": 0,
        "bodyless_feed_items_skipped": 0
      }
    ]
  }
}

{3 keys}

"chart": "notes_quality",

"withheld": false,

"data":

{1 key}

"tools":

[1 item]

{17 keys}

"name": "dockerscan",

"display": "dockerscan",

"category": "container-security",

"open_source": true,

"adapter": "github",

"corpus": "github",

"channel": "release",

"channels_scored":

[1 item]

"release"

"release_feed_empty": false,

"score": 87,

"depth": 47.5,

"examples": 35,

"transparency": 4.5,

"notes_scored": 4,

"zero_body_notes": 0,

"truncated_excluded": 0,

"bodyless_feed_items_skipped": 0

Search

1 endpoint

One query box over tools and releases.

GET /v1/search any key

Full-text over tool names, vendors, and release summaries.

Query parameters

Name	Type	Description
q	string	Required.
type	enum	tool or release — both if omitted.
limit	int	Default 20, max 100.

Coming later

2 endpoints

Designed, not live yet.

GET /v1/tools/{slug}/doc-diffs researcher+

Full documentation and API-reference diffs — what Diff subscribers get by email today.

GET /v1/corpus/export business

Bulk export of the underlying source→summary training pairs.

Questions or something not behaving as documented — send feedback, or see the FAQ.

API

Tools

Query parameters

Example

Query parameters

Example

Parameters

Example

Parameters

Example

Parameters

Releases

Query parameters

Categories

Newsletter issues

Query parameters

Parameters

Parameters

Tool APIs

Parameters

Code & supply chain

Parameters

Parameters

Parameters

Analytics

Parameters

Examples

Search

Query parameters

Coming later