Skip to main content
POST
Structured CVE assessment (LLM-free)

Scope and credits

Authorizations

Authorization
string
header
required

ApiKey <key_id>:

Body

application/json
agent_context
AgentContext · object
required
context
AssessmentContext · object | null
expected_types
string[] | null
options
Options · object | null
query
string | null
Maximum string length: 1024
resolution
ResolutionOptions · object | null
subject
AssessmentSubject · object | null
time_range
Time Range · object | null

Response

Successful Response

assessment_type
string
required
caveats
string[]
required
confidence
number
required
evidence_refs
Evidence Refs · object[]
required
input
Input · object
required
metadata
Metadata · object
required

Includes caller_assertions (values, verification status, use in decision, and supporting_refs), conditional_on (unverified input paths), confidence_basis, and enrichment availability/degradation. CVE subjects additionally expose evidence_support, risk_basis, severity, and publication_context. A KEV flag establishes known exploitation, not current activity or customer applicability. CVE environment assessments also include applicability: product_status (affected/unaffected/unknown) is scoped to known source product names; full status stays unknown because versions and configuration are not evaluated. environment_text_evaluated is false.

priority
Priority · object
required

Risk ranking and proposed action timing, not evidence certainty. For CVEs, severity, exploitation, exposure, and conditional caller premises affect priority; publication freshness does not. Unknown evidence alone never means safe to close. CVE environment assessments include basis: verify_applicability or known_product_mismatch_conditional_on_complete_inventory.

rationale_codes
string[]
required
resolution
ResolutionResult · object
required
signals
Signals · object
required
timestamp
number
required
trace_id
string
required
debug
Debug · object | null