PAGES

← sbomify

sbomify — API

sbomify APIv26.10.0 Read the vendor's spec ↗

  • 216 endpoints
  • 216 deprecated
  • 8 versions archived since Aug 10, 2026
  • Last checked Oct 26, 2026

A comprehensive API for managing Software Bill of Materials (SBOM) and document artifacts.

Get started

first call 
$ curl "$BASE_URL/api/v1/products" \
  -H "Authorization: Bearer $TOKEN"

Set $BASE_URL and $TOKEN first, then paste.

Base URL
Not named in the archived spec. $BASE_URL below stands for the origin you deploy against.
Authenticate
Bearer token in the Authorization header
1 other scheme
  • API key in the sessionid cookie
Shape

What it covers

  • Artifacts 23 create, read, update, delete
  • Workspaces 23 Manage workspace settings, members, branding, and collaboration features.
  • Controls 21 create, read, update, delete
  • Cle 20 create, read
  • Products 19 Structure your software inventory with products that group components and are organized by releases.
  • Releases 19 Tag and manage product releases with downloadable artifacts and version tracking.
  • Vulnerability Scanning 18 Configure and manage vulnerability scanning providers including OSV and Dependency Track.
  • Compliance 17 create, read, update
  • Security Advisories 14 create, read, update, delete
  • Components 11 Organize and manage software components that contain SBOMs and documents.
  • Access Requests 7 create, read
  • Plugins 6 create, read, update
7 more areas
  • Exports 4 read
  • Oidc Trusted Publishing 4 create, read, delete
  • Billing 3 Manage subscription plans, usage tracking, and billing operations.
  • Licensing 2 List licenses and validate license expressions.
  • Notifications 2 Retrieve system notifications, alerts, and updates relevant to the current user and workspace.
  • User 2 create, read
  • Internal 1 Internal endpoints for infrastructure integration.

Endpoints

216 of 216

Open an endpoint for a runnable command, its inputs and what it returns.

Artifacts 23

  • DELETE /api/v1/documents/{document_id} Delete Document deprecated

    Loading…

  • DELETE /api/v1/sboms/sbom/{sbom_id} Delete Sbom deprecated

    Loading…

  • GET /api/v1/documents/{document_id} Get Document deprecated

    Loading…

  • GET /api/v1/documents/{document_id}/download Download Document deprecated

    Loading…

  • GET /api/v1/documents/{document_id}/download/signed Download Document Signed deprecated

    Loading…

  • GET /api/v1/sboms/component/{component_id}/meta Get Component Metadata deprecated

    Loading…

  • GET /api/v1/sboms/sbom/{sbom_id}/provenance Download Provenance deprecated

    Loading…

  • GET /api/v1/sboms/sbom/{sbom_id}/signature Download Signature deprecated

    Loading…

  • GET /api/v1/sboms/{sbom_id} Get Sbom deprecated

    Loading…

  • GET /api/v1/sboms/{sbom_id}/crypto-inventory Get Sbom Crypto Inventory deprecated

    Loading…

  • GET /api/v1/sboms/{sbom_id}/crypto-inventory/cipher-suites.csv Download Cipher Suite Inventory Csv deprecated

    Loading…

  • GET /api/v1/sboms/{sbom_id}/download Download Sbom deprecated

    Loading…

  • GET /api/v1/sboms/{sbom_id}/download/signed Download Sbom Signed deprecated

    Loading…

  • PATCH /api/v1/documents/{document_id} Update Document deprecated

    Loading…

  • PATCH /api/v1/sboms/component/{component_id}/meta Patch Component Metadata deprecated

    Loading…

  • POST /api/v1/documents/ Create Document deprecated

    Loading…

  • POST /api/v1/sboms/artifact/cyclonedx/{component_id} Sbom Upload Cyclonedx deprecated

    Loading…

  • POST /api/v1/sboms/artifact/cyclonedx/{spec_version}/{component_id}/metadata Get Cyclonedx Component Metadata deprecated

    Loading…

  • POST /api/v1/sboms/artifact/spdx/{component_id} Sbom Upload Spdx deprecated

    Loading…

  • POST /api/v1/sboms/artifact/vex/{component_id} Vex Artifact Upload deprecated

    Loading…

  • POST /api/v1/sboms/sbom/{sbom_id}/provenance Upload Provenance deprecated

    Loading…

  • POST /api/v1/sboms/sbom/{sbom_id}/signature Upload Signature deprecated

    Loading…

  • POST /api/v1/sboms/upload-file/{component_id} Sbom Upload File deprecated

    Loading…

Workspaces 23

  • DELETE /api/v1/workspaces/{team_key}/contact-profiles/{profile_id} Delete Contact Profile deprecated

    Loading…

  • DELETE /api/v1/workspaces/{team_key}/domain Delete Team Domain deprecated

    Loading…

  • DELETE /api/v1/workspaces/{team_key}/invitations/{invitation_id} Delete Workspace Invitation deprecated

    Loading…

  • DELETE /api/v1/workspaces/{team_key}/suppliers/{supplier_id} Delete Workspace Supplier deprecated

    Loading…

  • GET /api/v1/workspaces/ List Teams deprecated

    Loading…

  • GET /api/v1/workspaces/{team_key} Get Team deprecated

    Loading…

  • GET /api/v1/workspaces/{team_key}/branding Get Team Branding deprecated

    Loading…

  • GET /api/v1/workspaces/{team_key}/contact-profiles List Contact Profiles deprecated

    Loading…

  • GET /api/v1/workspaces/{team_key}/contact-profiles/{profile_id} Get Contact Profile deprecated

    Loading…

  • GET /api/v1/workspaces/{team_key}/invitations List Workspace Invitations deprecated

    Loading…

  • GET /api/v1/workspaces/{team_key}/suppliers List Workspace Suppliers deprecated

    Loading…

  • PATCH /api/v1/workspaces/{team_key} Patch Team deprecated

    Loading…

  • PATCH /api/v1/workspaces/{team_key}/branding/{field} Update Team Branding Field deprecated

    Loading…

  • PATCH /api/v1/workspaces/{team_key}/contact-profiles/{profile_id} Update Contact Profile deprecated

    Loading…

  • PATCH /api/v1/workspaces/{team_key}/domain Update Team Domain deprecated

    Loading…

  • PATCH /api/v1/workspaces/{team_key}/suppliers/{supplier_id} Update Workspace Supplier deprecated

    Loading…

  • POST /api/v1/workspaces/{team_key}/branding/upload/{file_type} Upload Branding File deprecated

    Loading…

  • POST /api/v1/workspaces/{team_key}/contact-profiles Create Contact Profile deprecated

    Loading…

  • POST /api/v1/workspaces/{team_key}/invitations Create Workspace Invitation deprecated

    Loading…

  • POST /api/v1/workspaces/{team_key}/suppliers Create Workspace Supplier deprecated

    Loading…

  • PUT /api/v1/workspaces/{team_key} Update Team deprecated

    Loading…

  • PUT /api/v1/workspaces/{team_key}/branding Update Team Branding deprecated

    Loading…

  • PUT /api/v1/workspaces/{team_key}/domain Update Team Domain deprecated

    Loading…

Controls 21

  • DELETE /api/v1/controls/catalogs/{catalog_id}/ Delete a catalog and all its controls/statuses deprecated

    Loading…

  • DELETE /api/v1/controls/evidence/{evidence_id}/ Delete evidence deprecated

    Loading…

  • GET /api/v1/controls/automation/mappings/ Get plugin-to-control automation mappings deprecated

    Loading…

  • GET /api/v1/controls/catalogs/ List catalogs for the current workspace deprecated

    Loading…

  • GET /api/v1/controls/catalogs/{catalog_id}/ Get catalog detail deprecated

    Loading…

  • GET /api/v1/controls/catalogs/{catalog_id}/controls/ List controls with statuses for a catalog deprecated

    Loading…

  • GET /api/v1/controls/catalogs/{catalog_id}/export/csv Export controls as CSV deprecated

    Loading…

  • GET /api/v1/controls/catalogs/{catalog_id}/export/summary-csv Export controls summary as CSV deprecated

    Loading…

  • GET /api/v1/controls/controls/{control_id}/evidence/ List evidence for a control deprecated

    Loading…

  • GET /api/v1/controls/controls/{control_id}/mappings/ Get all mappings for a control (both directions) deprecated

    Loading…

  • GET /api/v1/controls/public/{workspace_key}/ Public controls compliance summary for a workspace deprecated

    Loading…

  • GET /api/v1/controls/public/{workspace_key}/{product_id}/ Public controls compliance summary for a product deprecated

    Loading…

  • PATCH /api/v1/controls/catalogs/{catalog_id}/ Update catalog (toggle is_active) deprecated

    Loading…

  • POST /api/v1/controls/automation/sync/ Sync control statuses from latest plugin assessments (admin only) deprecated

    Loading…

  • POST /api/v1/controls/catalogs/activate/ Activate a built-in catalog deprecated

    Loading…

  • POST /api/v1/controls/catalogs/import-oscal/ Import an OSCAL catalog deprecated

    Loading…

  • POST /api/v1/controls/controls/{control_id}/evidence/ Add evidence to a control deprecated

    Loading…

  • POST /api/v1/controls/mappings/ Create a control mapping (admin only) deprecated

    Loading…

  • POST /api/v1/controls/mappings/bulk/ Bulk import control mappings (admin only) deprecated

    Loading…

  • POST /api/v1/controls/status/bulk/ Bulk update control statuses (atomic) deprecated

    Loading…

  • PUT /api/v1/controls/controls/{control_id}/status/ Upsert a control status deprecated

    Loading…

Cle 20

  • GET /api/v1/component-releases/{component_release_id}/cle/events List Component Release Cle Events deprecated

    Loading…

  • GET /api/v1/component-releases/{component_release_id}/cle/events/{event_id} Get Component Release Cle Event deprecated

    Loading…

  • GET /api/v1/component-releases/{component_release_id}/cle/support-definitions List Component Release Cle Support Definitions deprecated

    Loading…

  • GET /api/v1/components/{component_id}/cle/events List Component Cle Events deprecated

    Loading…

  • GET /api/v1/components/{component_id}/cle/events/{event_id} Get Component Cle Event deprecated

    Loading…

  • GET /api/v1/components/{component_id}/cle/support-definitions List Component Cle Support Definitions deprecated

    Loading…

  • GET /api/v1/products/{product_id}/cle/events List Cle Events deprecated

    Loading…

  • GET /api/v1/products/{product_id}/cle/events/{event_id} Get Cle Event deprecated

    Loading…

  • GET /api/v1/products/{product_id}/cle/support-definitions List Cle Support Definitions deprecated

    Loading…

  • GET /api/v1/releases/{release_id}/cle/events List Release Cle Events deprecated

    Loading…

  • GET /api/v1/releases/{release_id}/cle/events/{event_id} Get Release Cle Event deprecated

    Loading…

  • GET /api/v1/releases/{release_id}/cle/support-definitions List Release Cle Support Definitions deprecated

    Loading…

  • POST /api/v1/component-releases/{component_release_id}/cle/events Create Component Release Cle Event Endpoint deprecated

    Loading…

  • POST /api/v1/component-releases/{component_release_id}/cle/support-definitions Create Component Release Cle Support Definition Endpoint deprecated

    Loading…

  • POST /api/v1/components/{component_id}/cle/events Create Component Cle Event Endpoint deprecated

    Loading…

  • POST /api/v1/components/{component_id}/cle/support-definitions Create Component Cle Support Definition Endpoint deprecated

    Loading…

  • POST /api/v1/products/{product_id}/cle/events Create Cle Event Endpoint deprecated

    Loading…

  • POST /api/v1/products/{product_id}/cle/support-definitions Create Cle Support Definition Endpoint deprecated

    Loading…

  • POST /api/v1/releases/{release_id}/cle/events Create Release Cle Event Endpoint deprecated

    Loading…

  • POST /api/v1/releases/{release_id}/cle/support-definitions Create Release Cle Support Definition Endpoint deprecated

    Loading…

Products 19

  • DELETE /api/v1/products/{product_id} Delete Product deprecated

    Loading…

  • DELETE /api/v1/products/{product_id}/identifiers/{identifier_id} Delete Product Identifier deprecated

    Loading…

  • GET /api/v1/products List Products deprecated

    Loading…

  • GET /api/v1/products/{product_id} Get Product deprecated

    Loading…

  • GET /api/v1/products/{product_id}/cbom/download Download Product Cbom deprecated

    Loading…

  • GET /api/v1/products/{product_id}/download Download Product Sbom deprecated

    Loading…

  • GET /api/v1/products/{product_id}/eol-readiness Whether a product can reach end of life with CRA 6.1.6 satisfied deprecated

    Loading…

  • GET /api/v1/products/{product_id}/identifiers List Product Identifiers deprecated

    Loading…

  • PATCH /api/v1/products/{product_id} Patch Product deprecated

    Loading…

  • POST /api/v1/products Create Product deprecated

    Loading…

  • POST /api/v1/products/{product_id}/identifiers Create Product Identifier deprecated

    Loading…

  • POST /api/v1/products/{product_id}/links Create Product Link deprecated

    Loading…

  • PUT /api/v1/products/{product_id} Update Product deprecated

    Loading…

  • PUT /api/v1/products/{product_id}/identifiers Bulk Update Product Identifiers deprecated

    Loading…

  • PUT /api/v1/products/{product_id}/identifiers/{identifier_id} Update Product Identifier deprecated

    Loading…

Releases 19

  • DELETE /api/v1/documents/{document_id}/releases/{release_id} Remove Document From Release deprecated

    Loading…

  • DELETE /api/v1/releases/{release_id} Delete Release deprecated

    Loading…

  • DELETE /api/v1/releases/{release_id}/artifacts/{artifact_id} Remove Artifact From Release deprecated

    Loading…

  • DELETE /api/v1/sboms/{sbom_id}/releases/{release_id} Remove Sbom From Release deprecated

    Loading…

  • GET /api/v1/components/{component_id}/releases List Component Releases deprecated

    Loading…

  • GET /api/v1/documents/{document_id}/releases List Document Releases deprecated

    Loading…

  • GET /api/v1/releases List All Releases deprecated

    Loading…

  • GET /api/v1/releases/{release_id} Get Release deprecated

    Loading…

  • GET /api/v1/releases/{release_id}/artifacts List Release Artifacts deprecated

    Loading…

  • GET /api/v1/releases/{release_id}/cbom/download Download Release Cbom deprecated

    Loading…

  • GET /api/v1/releases/{release_id}/download Download Release deprecated

    Loading…

  • GET /api/v1/releases/{release_id}/vex/download Download Release Vex deprecated

    Loading…

  • GET /api/v1/sboms/{sbom_id}/releases List Sbom Releases deprecated

    Loading…

  • PATCH /api/v1/releases/{release_id} Patch Release deprecated

    Loading…

  • POST /api/v1/documents/{document_id}/releases Add Document To Releases deprecated

    Loading…

  • POST /api/v1/releases Create Release deprecated

    Loading…

  • POST /api/v1/releases/{release_id}/artifacts Add Artifacts To Release deprecated

    Loading…

  • POST /api/v1/sboms/{sbom_id}/releases Add Sbom To Releases deprecated

    Loading…

  • PUT /api/v1/releases/{release_id} Update Release deprecated

    Loading…

Vulnerability Scanning 18

  • GET /api/v1/vulnerability-scanning/components/{component_id}/triage Get Component Triage deprecated

    Loading…

  • GET /api/v1/vulnerability-scanning/components/{component_id}/vex-submissions List Component Vex Submissions deprecated

    Loading…

  • GET /api/v1/vulnerability-scanning/vex-submissions/{submission_id} Get Vex Submission deprecated

    Loading…

  • GET /api/v1/vulnerability-scanning/workspaces/{team_key}/fix-prompt Get the fix and triage prompts for one vulnerability deprecated

    Loading…

  • GET /api/v1/vulnerability-scanning/workspaces/{team_key}/products-releases Get products and releases for vulnerability filtering deprecated

    Loading…

  • GET /api/v1/vulnerability-scanning/workspaces/{team_key}/vex-submissions List Workspace Vex Submissions deprecated

    Loading…

  • GET /api/v1/vulnerability-scanning/workspaces/{team_key}/vulnerabilities List the open vulnerabilities deprecated

    Loading…

  • GET /api/v1/vulnerability-scanning/workspaces/{team_key}/vulnerability-drill-down Get detailed vulnerability drill-down data deprecated

    Loading…

  • GET /api/v1/vulnerability-scanning/workspaces/{team_key}/vulnerability-heatmap Get vulnerability heatmap data for visual analysis deprecated

    Loading…

  • GET /api/v1/vulnerability-scanning/workspaces/{team_key}/vulnerability-kpis Get the five CRA vulnerability KPIs for a workspace deprecated

    Loading…

  • GET /api/v1/vulnerability-scanning/workspaces/{team_key}/vulnerability-stats Get workspace vulnerability scanning statistics deprecated

    Loading…

  • GET /api/v1/vulnerability-scanning/workspaces/{team_key}/vulnerability-timeseries Get vulnerability scanning time series data deprecated

    Loading…

  • POST /api/v1/vulnerability-scanning/components/{component_id}/triage Apply Component Triage deprecated

    Loading…

  • POST /api/v1/vulnerability-scanning/components/{component_id}/vex-preview Preview Vex deprecated

    Loading…

  • POST /api/v1/vulnerability-scanning/components/{component_id}/vex-submissions Create Vex Submission deprecated

    Loading…

  • POST /api/v1/vulnerability-scanning/triage/bulk Bulk Triage deprecated

    Loading…

  • POST /api/v1/vulnerability-scanning/vex-submissions/{submission_id}/withdraw Withdraw Vex Submission deprecated

    Loading…

Compliance 17

  • GET /api/v1/compliance/cra/{assessment_id} Get Assessment deprecated

    Loading…

  • GET /api/v1/compliance/cra/{assessment_id}/documents/{kind}/download Download Document Pdf deprecated

    Loading…

  • GET /api/v1/compliance/cra/{assessment_id}/documents/{kind}/preview Preview Document deprecated

    Loading…

  • GET /api/v1/compliance/cra/{assessment_id}/export/{package_id}/download Download Export deprecated

    Loading…

  • GET /api/v1/compliance/cra/{assessment_id}/oscal-export Export Oscal Json deprecated

    Loading…

  • GET /api/v1/compliance/cra/{assessment_id}/sbom-status Get Sbom Status deprecated

    Loading…

  • GET /api/v1/compliance/cra/{assessment_id}/signature Get Doc Signature deprecated

    Loading…

  • GET /api/v1/compliance/cra/{assessment_id}/staleness Check Staleness deprecated

    Loading…

  • GET /api/v1/compliance/cra/{assessment_id}/step/{step} Get Step Context deprecated

    Loading…

  • PATCH /api/v1/compliance/cra/{assessment_id}/step/{step} Save Step Data deprecated

    Loading…

  • POST /api/v1/compliance/cra/product/{product_id} Create Or Get Assessment deprecated

    Loading…

  • POST /api/v1/compliance/cra/{assessment_id}/export Create Export deprecated

    Loading…

  • POST /api/v1/compliance/cra/{assessment_id}/findings/{finding_id}/observations Create Observation deprecated

    Loading…

  • POST /api/v1/compliance/cra/{assessment_id}/generate/{kind} Generate Document deprecated

    Loading…

  • POST /api/v1/compliance/cra/{assessment_id}/refresh Refresh Stale deprecated

    Loading…

  • PUT /api/v1/compliance/cra/{assessment_id}/findings/{finding_id} Update Finding deprecated

    Loading…

  • PUT /api/v1/compliance/cra/{assessment_id}/signature Save Doc Signature deprecated

    Loading…

Security Advisories 14

  • DELETE /api/v1/advisories/{advisory_id} Delete an advisory deprecated

    Loading…

  • GET /api/v1/advisories/ List advisories in the current workspace deprecated

    Loading…

  • GET /api/v1/advisories/public/{workspace_key} List a workspace's public advisories deprecated

    Loading…

  • GET /api/v1/advisories/public/{workspace_key}/{advisory_id} Get one public advisory deprecated

    Loading…

  • GET /api/v1/advisories/public/{workspace_key}/{advisory_id}/csaf Get one public advisory as a CSAF 2.0 document deprecated

    Loading…

  • GET /api/v1/advisories/{advisory_id} Get one advisory deprecated

    Loading…

  • PATCH /api/v1/advisories/{advisory_id} Update an advisory's own fields deprecated

    Loading…

  • PATCH /api/v1/advisories/{advisory_id}/products/{product_id}/status Update a product's status on an advisory deprecated

    Loading…

  • PATCH /api/v1/advisories/{advisory_id}/statuses/{status_id} Update one product status on an advisory deprecated

    Loading…

  • POST /api/v1/advisories/ Create an advisory deprecated

    Loading…

  • POST /api/v1/advisories/{advisory_id}/products Add a product, or affected releases, to an advisory deprecated

    Loading…

  • POST /api/v1/advisories/{advisory_id}/publish Publish an advisory at a visibility deprecated

    Loading…

  • POST /api/v1/advisories/{advisory_id}/updates Post a timeline update or move the remediation status deprecated

    Loading…

  • POST /api/v1/advisories/{advisory_id}/withdraw Withdraw a published advisory deprecated

    Loading…

Components 11

  • DELETE /api/v1/components/{component_id} Delete Component deprecated

    Loading…

  • GET /api/v1/components List Components deprecated

    Loading…

  • GET /api/v1/components/{component_id} Get Component deprecated

    Loading…

  • GET /api/v1/components/{component_id}/documents List Component Documents deprecated

    Loading…

  • GET /api/v1/components/{component_id}/metadata Get Component Metadata deprecated

    Loading…

  • GET /api/v1/components/{component_id}/sboms List Component Sboms deprecated

    Loading…

  • GET /api/v1/dashboard/summary Get Dashboard Summary deprecated

    Loading…

  • PATCH /api/v1/components/{component_id} Patch Component deprecated

    Loading…

  • PATCH /api/v1/components/{component_id}/metadata Patch Component Metadata deprecated

    Loading…

  • POST /api/v1/components Create Component deprecated

    Loading…

  • PUT /api/v1/components/{component_id} Update Component deprecated

    Loading…

Access Requests 7

  • GET /api/v1/access-requests/pending List Pending Access Requests deprecated

    Loading…

  • GET /api/v1/teams/{team_key}/access-request/{request_id}/nda Get Nda For Signing deprecated

    Loading…

  • POST /api/v1/access-requests/{request_id}/approve Approve Access Request deprecated

    Loading…

  • POST /api/v1/access-requests/{request_id}/reject Reject Access Request deprecated

    Loading…

  • POST /api/v1/access-requests/{request_id}/revoke Revoke Access Request deprecated

    Loading…

  • POST /api/v1/teams/{team_key}/access-request Create Access Request deprecated

    Loading…

  • POST /api/v1/teams/{team_key}/access-request/{request_id}/sign-nda Sign Nda deprecated

    Loading…

Plugins 6

  • GET /api/v1/plugins/assessments/{sbom_id} Get Sbom Assessments deprecated

    Loading…

  • GET /api/v1/plugins/assessments/{sbom_id}/badge Get Sbom Assessment Badge deprecated

    Loading…

  • GET /api/v1/plugins/registered Get Registered Plugins deprecated

    Loading…

  • GET /api/v1/plugins/workspaces/{team_key}/settings Get Team Plugin Settings deprecated

    Loading…

  • POST /api/v1/plugins/assessments/{sbom_id}/{plugin_name}/rerun Rerun Assessment deprecated

    Loading…

  • PUT /api/v1/plugins/workspaces/{team_key}/settings Update Team Plugin Settings deprecated

    Loading…

Exports 4

  • GET /api/v1/exports/findings.csv Export assessment findings as CSV deprecated

    Loading…

  • GET /api/v1/exports/inventory.csv Export the package inventory as CSV deprecated

    Loading…

  • GET /api/v1/exports/licenses.csv Export the license list as CSV deprecated

    Loading…

  • GET /api/v1/exports/vulnerabilities.csv Export vulnerability findings as CSV deprecated

    Loading…

Oidc Trusted Publishing 4

  • DELETE /api/v1/auth/oidc/github/bindings/{binding_id} Delete a GitHub trusted-publisher binding. deprecated

    Loading…

  • GET /api/v1/auth/oidc/github/bindings List GitHub trusted-publisher bindings for a component. deprecated

    Loading…

  • POST /api/v1/auth/oidc/github/bindings Create a GitHub trusted-publisher binding for a component. deprecated

    Loading…

  • POST /api/v1/auth/oidc/github/exchange Exchange a GitHub Actions OIDC token for a short-lived sbomify token. deprecated

    Loading…

Billing 3

  • GET /api/v1/billing/plans/ Get Plans deprecated

    Loading…

  • GET /api/v1/billing/usage/ Get Usage deprecated

    Loading…

  • POST /api/v1/billing/change-plan/ Change Plan deprecated

    Loading…

Licensing 2

  • GET /api/v1/licensing/licenses List Licenses deprecated

    Loading…

  • POST /api/v1/licensing/license-expressions/validate Validate License Expression deprecated

    Loading…

Notifications 2

  • GET /api/v1/notifications/ List Notifications deprecated

    Loading…

  • POST /api/v1/notifications/clear/ Clear Notifications deprecated

    Loading…

User 2

  • GET /api/v1/user/export Export User Data Endpoint deprecated

    Loading…

  • POST /api/v1/user/delete Delete Account deprecated

    Loading…

Internal 1

  • GET /api/v1/internal/domains Check Domain Allowed deprecated

    Loading…

Change log

    • +PATCH /api/v1/advisories/{advisory_id}/products/{product_id}/status
    • +PATCH /api/v1/advisories/{advisory_id}/statuses/{status_id}
    • +POST /api/v1/advisories/{advisory_id}/products
    • +GET /api/v1/vulnerability-scanning/components/{component_id}/vex-submissions
    • +GET /api/v1/vulnerability-scanning/vex-submissions/{submission_id}
    • +GET /api/v1/vulnerability-scanning/workspaces/{team_key}/fix-prompt
    • +GET /api/v1/vulnerability-scanning/workspaces/{team_key}/vex-submissions
    • +GET /api/v1/vulnerability-scanning/workspaces/{team_key}/vulnerabilities
    • +POST /api/v1/vulnerability-scanning/components/{component_id}/vex-submissions
    • +POST /api/v1/vulnerability-scanning/vex-submissions/{submission_id}/withdraw
    • +DELETE /api/v1/workspaces/{team_key}/invitations/{invitation_id}
    • +GET /api/v1/workspaces/{team_key}/invitations
    • +POST /api/v1/workspaces/{team_key}/invitations
    • −POST /api/v1/licensing/custom-licenses
    • +GET /api/v1/plugins/workspaces/{team_key}/settings
    • +PUT /api/v1/plugins/workspaces/{team_key}/settings
    • +DELETE /api/v1/advisories/{advisory_id}
    • +GET /api/v1/advisories/
    • +GET /api/v1/advisories/public/{workspace_key}
    • +GET /api/v1/advisories/public/{workspace_key}/{advisory_id}
    • +GET /api/v1/advisories/public/{workspace_key}/{advisory_id}/csaf
    • +GET /api/v1/advisories/{advisory_id}
    • +PATCH /api/v1/advisories/{advisory_id}
    • +POST /api/v1/advisories/
    • +POST /api/v1/advisories/{advisory_id}/publish
    • +POST /api/v1/advisories/{advisory_id}/updates
    • +POST /api/v1/advisories/{advisory_id}/withdraw
    • ⚠DELETE /api/v1/auth/oidc/github/bindings/{binding_id}
    • ⚠DELETE /api/v1/components/{component_id}
    • ⚠DELETE /api/v1/controls/catalogs/{catalog_id}/
    • ⚠DELETE /api/v1/controls/evidence/{evidence_id}/
    • ⚠DELETE /api/v1/documents/{document_id}
    • ⚠DELETE /api/v1/documents/{document_id}/releases/{release_id}
    • ⚠DELETE /api/v1/products/{product_id}
    • ⚠DELETE /api/v1/products/{product_id}/identifiers/{identifier_id}
    • ⚠DELETE /api/v1/products/{product_id}/links/{link_id}
    • ⚠DELETE /api/v1/releases/{release_id}
    • ⚠DELETE /api/v1/releases/{release_id}/artifacts/{artifact_id}
    • ⚠DELETE /api/v1/sboms/sbom/{sbom_id}
    • ⚠DELETE /api/v1/sboms/{sbom_id}/releases/{release_id}
    • ⚠DELETE /api/v1/workspaces/{team_key}/contact-profiles/{profile_id}
    • ⚠DELETE /api/v1/workspaces/{team_key}/domain
    • ⚠DELETE /api/v1/workspaces/{team_key}/suppliers/{supplier_id}
    • ⚠GET /api/v1/access-requests/pending
    • ⚠GET /api/v1/auth/oidc/github/bindings
    • ⚠GET /api/v1/billing/plans/
    • ⚠GET /api/v1/billing/usage/
    • ⚠GET /api/v1/compliance/cra/{assessment_id}
    • ⚠GET /api/v1/compliance/cra/{assessment_id}/documents/{kind}/download
    • ⚠GET /api/v1/compliance/cra/{assessment_id}/documents/{kind}/preview
    • ⚠GET /api/v1/compliance/cra/{assessment_id}/export/{package_id}/download
    • ⚠GET /api/v1/compliance/cra/{assessment_id}/oscal-export
    • ⚠GET /api/v1/compliance/cra/{assessment_id}/sbom-status
    • ⚠GET /api/v1/compliance/cra/{assessment_id}/signature
    • ⚠GET /api/v1/compliance/cra/{assessment_id}/staleness
    • ⚠GET /api/v1/compliance/cra/{assessment_id}/step/{step}
    • ⚠GET /api/v1/component-releases/{component_release_id}/cle/events
    • ⚠GET /api/v1/component-releases/{component_release_id}/cle/events/{event_id}
    • ⚠GET /api/v1/component-releases/{component_release_id}/cle/support-definitions
    • ⚠GET /api/v1/components
    • ⚠GET /api/v1/components/{component_id}
    • ⚠GET /api/v1/components/{component_id}/cle/events
    • ⚠GET /api/v1/components/{component_id}/cle/events/{event_id}
    • ⚠GET /api/v1/components/{component_id}/cle/support-definitions
    • ⚠GET /api/v1/components/{component_id}/documents
    • ⚠GET /api/v1/components/{component_id}/metadata
    • ⚠GET /api/v1/components/{component_id}/releases
    • ⚠GET /api/v1/components/{component_id}/sboms
    • ⚠GET /api/v1/controls/automation/mappings/
    • ⚠GET /api/v1/controls/catalogs/
    • ⚠GET /api/v1/controls/catalogs/{catalog_id}/
    • ⚠GET /api/v1/controls/catalogs/{catalog_id}/controls/
    • ⚠GET /api/v1/controls/catalogs/{catalog_id}/export/csv
    • ⚠GET /api/v1/controls/catalogs/{catalog_id}/export/summary-csv
    • ⚠GET /api/v1/controls/controls/{control_id}/evidence/
    • ⚠GET /api/v1/controls/controls/{control_id}/mappings/
    • ⚠GET /api/v1/controls/public/{workspace_key}/
    • ⚠GET /api/v1/controls/public/{workspace_key}/{product_id}/
    • ⚠GET /api/v1/dashboard/summary
    • ⚠GET /api/v1/documents/{document_id}
    • ⚠GET /api/v1/documents/{document_id}/download
    • ⚠GET /api/v1/documents/{document_id}/download/signed
    • ⚠GET /api/v1/documents/{document_id}/releases
    • ⚠GET /api/v1/exports/findings.csv
    • ⚠GET /api/v1/exports/inventory.csv
    • ⚠GET /api/v1/exports/licenses.csv
    • ⚠GET /api/v1/exports/vulnerabilities.csv
    • ⚠GET /api/v1/internal/domains
    • ⚠GET /api/v1/licensing/licenses
    • ⚠GET /api/v1/notifications/
    • ⚠GET /api/v1/plugins/assessments/{sbom_id}
    • ⚠GET /api/v1/plugins/assessments/{sbom_id}/badge
    • ⚠GET /api/v1/plugins/registered
    • ⚠GET /api/v1/products
    • ⚠GET /api/v1/products/{product_id}
    • ⚠GET /api/v1/products/{product_id}/cbom/download
    • ⚠GET /api/v1/products/{product_id}/cle/events
    • ⚠GET /api/v1/products/{product_id}/cle/events/{event_id}
    • ⚠GET /api/v1/products/{product_id}/cle/support-definitions
    • ⚠GET /api/v1/products/{product_id}/download
    • ⚠GET /api/v1/products/{product_id}/eol-readiness
    • ⚠GET /api/v1/products/{product_id}/identifiers
    • ⚠GET /api/v1/products/{product_id}/links
    • ⚠GET /api/v1/releases
    • ⚠GET /api/v1/releases/{release_id}
    • ⚠GET /api/v1/releases/{release_id}/artifacts
    • ⚠GET /api/v1/releases/{release_id}/cbom/download
    • ⚠GET /api/v1/releases/{release_id}/cle/events
    • ⚠GET /api/v1/releases/{release_id}/cle/events/{event_id}
    • ⚠GET /api/v1/releases/{release_id}/cle/support-definitions
    • ⚠GET /api/v1/releases/{release_id}/download
    • ⚠GET /api/v1/releases/{release_id}/vex/download
    • ⚠GET /api/v1/sboms/component/{component_id}/meta
    • ⚠GET /api/v1/sboms/sbom/{sbom_id}/provenance
    • ⚠GET /api/v1/sboms/sbom/{sbom_id}/signature
    • ⚠GET /api/v1/sboms/{sbom_id}
    • ⚠GET /api/v1/sboms/{sbom_id}/crypto-inventory
    • ⚠GET /api/v1/sboms/{sbom_id}/crypto-inventory/cipher-suites.csv
    • ⚠GET /api/v1/sboms/{sbom_id}/download
    • ⚠GET /api/v1/sboms/{sbom_id}/download/signed
    • ⚠GET /api/v1/sboms/{sbom_id}/releases
    • ⚠GET /api/v1/teams/{team_key}/access-request/{request_id}/nda
    • ⚠GET /api/v1/user/export
    • ⚠GET /api/v1/vulnerability-scanning/components/{component_id}/triage
    • ⚠GET /api/v1/vulnerability-scanning/workspaces/{team_key}/products-releases
    • ⚠GET /api/v1/vulnerability-scanning/workspaces/{team_key}/vulnerability-drill-down
    • ⚠GET /api/v1/vulnerability-scanning/workspaces/{team_key}/vulnerability-heatmap
    • ⚠GET /api/v1/vulnerability-scanning/workspaces/{team_key}/vulnerability-kpis
    • ⚠GET /api/v1/vulnerability-scanning/workspaces/{team_key}/vulnerability-stats
    • ⚠GET /api/v1/vulnerability-scanning/workspaces/{team_key}/vulnerability-timeseries
    • ⚠GET /api/v1/vulnerability-scanning/workspaces/{team_key}/vulnerability-trends
    • ⚠GET /api/v1/workspaces/
    • ⚠GET /api/v1/workspaces/{team_key}
    • ⚠GET /api/v1/workspaces/{team_key}/branding
    • ⚠GET /api/v1/workspaces/{team_key}/contact-profiles
    • ⚠GET /api/v1/workspaces/{team_key}/contact-profiles/{profile_id}
    • ⚠GET /api/v1/workspaces/{team_key}/suppliers
    • ⚠PATCH /api/v1/compliance/cra/{assessment_id}/step/{step}
    • ⚠PATCH /api/v1/components/{component_id}
    • ⚠PATCH /api/v1/components/{component_id}/metadata
    • ⚠PATCH /api/v1/controls/catalogs/{catalog_id}/
    • ⚠PATCH /api/v1/documents/{document_id}
    • ⚠PATCH /api/v1/products/{product_id}
    • ⚠PATCH /api/v1/releases/{release_id}
    • ⚠PATCH /api/v1/sboms/component/{component_id}/meta
    • ⚠PATCH /api/v1/workspaces/{team_key}
    • ⚠PATCH /api/v1/workspaces/{team_key}/branding/{field}
    • ⚠PATCH /api/v1/workspaces/{team_key}/contact-profiles/{profile_id}
    • ⚠PATCH /api/v1/workspaces/{team_key}/domain
    • ⚠PATCH /api/v1/workspaces/{team_key}/suppliers/{supplier_id}
    • ⚠POST /api/v1/access-requests/{request_id}/approve
    • ⚠POST /api/v1/access-requests/{request_id}/reject
    • ⚠POST /api/v1/access-requests/{request_id}/revoke
    • ⚠POST /api/v1/auth/oidc/github/bindings
    • ⚠POST /api/v1/auth/oidc/github/exchange
    • ⚠POST /api/v1/billing/change-plan/
    • ⚠POST /api/v1/compliance/cra/product/{product_id}
    • ⚠POST /api/v1/compliance/cra/{assessment_id}/export
    • ⚠POST /api/v1/compliance/cra/{assessment_id}/findings/{finding_id}/observations
    • ⚠POST /api/v1/compliance/cra/{assessment_id}/generate/{kind}
    • ⚠POST /api/v1/compliance/cra/{assessment_id}/refresh
    • ⚠POST /api/v1/component-releases/{component_release_id}/cle/events
    • ⚠POST /api/v1/component-releases/{component_release_id}/cle/support-definitions
    • ⚠POST /api/v1/components
    • ⚠POST /api/v1/components/{component_id}/cle/events
    • ⚠POST /api/v1/components/{component_id}/cle/support-definitions
    • ⚠POST /api/v1/controls/automation/sync/
    • ⚠POST /api/v1/controls/catalogs/activate/
    • ⚠POST /api/v1/controls/catalogs/import-oscal/
    • ⚠POST /api/v1/controls/controls/{control_id}/evidence/
    • ⚠POST /api/v1/controls/mappings/
    • ⚠POST /api/v1/controls/mappings/bulk/
    • ⚠POST /api/v1/controls/status/bulk/
    • ⚠POST /api/v1/documents/
    • ⚠POST /api/v1/documents/{document_id}/releases
    • ⚠POST /api/v1/licensing/custom-licenses
    • ⚠POST /api/v1/licensing/license-expressions/validate
    • ⚠POST /api/v1/notifications/clear/
    • ⚠POST /api/v1/plugins/assessments/{sbom_id}/{plugin_name}/rerun
    • ⚠POST /api/v1/products
    • ⚠POST /api/v1/products/{product_id}/cle/events
    • ⚠POST /api/v1/products/{product_id}/cle/support-definitions
    • ⚠POST /api/v1/products/{product_id}/identifiers
    • ⚠POST /api/v1/products/{product_id}/links
    • ⚠POST /api/v1/releases
    • ⚠POST /api/v1/releases/{release_id}/artifacts
    • ⚠POST /api/v1/releases/{release_id}/cle/events
    • ⚠POST /api/v1/releases/{release_id}/cle/support-definitions
    • ⚠POST /api/v1/sboms/artifact/cyclonedx/{component_id}
    • ⚠POST /api/v1/sboms/artifact/cyclonedx/{spec_version}/{component_id}/metadata
    • ⚠POST /api/v1/sboms/artifact/spdx/{component_id}
    • ⚠POST /api/v1/sboms/artifact/vex/{component_id}
    • ⚠POST /api/v1/sboms/sbom/{sbom_id}/provenance
    • ⚠POST /api/v1/sboms/sbom/{sbom_id}/signature
    • ⚠POST /api/v1/sboms/upload-file/{component_id}
    • ⚠POST /api/v1/sboms/{sbom_id}/releases
    • ⚠POST /api/v1/teams/{team_key}/access-request
    • ⚠POST /api/v1/teams/{team_key}/access-request/{request_id}/sign-nda
    • ⚠POST /api/v1/user/delete
    • ⚠POST /api/v1/vulnerability-scanning/components/{component_id}/triage
    • ⚠POST /api/v1/vulnerability-scanning/components/{component_id}/vex-preview
    • ⚠POST /api/v1/vulnerability-scanning/triage/bulk
    • ⚠POST /api/v1/workspaces/{team_key}/branding/upload/{file_type}
    • ⚠POST /api/v1/workspaces/{team_key}/contact-profiles
    • ⚠POST /api/v1/workspaces/{team_key}/suppliers
    • ⚠PUT /api/v1/compliance/cra/{assessment_id}/findings/{finding_id}
    • ⚠PUT /api/v1/compliance/cra/{assessment_id}/signature
    • ⚠PUT /api/v1/components/{component_id}
    • ⚠PUT /api/v1/controls/controls/{control_id}/status/
    • ⚠PUT /api/v1/products/{product_id}
    • ⚠PUT /api/v1/products/{product_id}/identifiers
    • ⚠PUT /api/v1/products/{product_id}/identifiers/{identifier_id}
    • ⚠PUT /api/v1/products/{product_id}/links
    • ⚠PUT /api/v1/products/{product_id}/links/{link_id}
    • ⚠PUT /api/v1/releases/{release_id}
    • ⚠PUT /api/v1/workspaces/{team_key}
    • ⚠PUT /api/v1/workspaces/{team_key}/branding
    • ⚠PUT /api/v1/workspaces/{team_key}/domain
    • +GET /api/v1/exports/findings.csv
    • +GET /api/v1/exports/inventory.csv
    • +GET /api/v1/exports/licenses.csv
    • +GET /api/v1/exports/vulnerabilities.csv
compare.md

    Free the public facts, no sign-in Any paid plan all other sections Researcher & Business pricing history and category rank

    my-toolchain — 0 tools

      Betas, release candidates and previews. Turn it off to see final releases only. It also applies to changes you ask for over MCP when you're signed in.
      browse all tools → score card for your toolchain →
      cyber-toolchain / feedback

      Send us feedback