Internal protocol reference

Endpoints, request formats and responses for the local CodeSecurity backend. Start with a workflow or find the endpoint you need.

0.1.0 · source bccff29 · Current reference · Download OpenAPI specification

Private service protocols are unsupported for external integration. Their schemas describe source declarations; they are not public service endpoints.

Find a route

Browse by group below, use your browser’s find command, or search all documentation.

Advisor Connector 7 Scanner 11 Updater 5

Source preview and authority boundaries

The runtime scanner, source-blind updater and Advisor connector have separate authority and lifecycle boundaries. Their paths are not added to the public control surface.

Examples are synthetic and validated against declared JSON Schema shapes. Runtime validators, state and ownership can reject an otherwise matching payload. Read authentication and export limitations.

Advisor Connector 7 routesFind a route ↑

GET/healthzHealthz POST/v1/cancelCancel operation POST/v1/generateGenerate POST/v1/local-modelsLocal models POST/v1/observeObserve local operation POST/v1/operationsAdmit operation POST/v1/testTest provider

Scanner 11 routesFind a route ↑

GET/cache/rollback-eligibilityCache rollback eligibility POST/cache/verification/retryRetry cache verification GET/healthzHealthz GET/metricsMetrics GET/runsList runs POST/runsStart run DELETE/runs/{run_id}Cancel run GET/runs/{run_id}Get run GET/runs/{run_id}/findingsGet run findings POST/runs/{run_id}/result/ackAcknowledge run result GET/toolsTools

Updater 5 routesFind a route ↑

GET/healthzHealthz POST/operationsCreate operation DELETE/operations/{operation_id}Cancel operation GET/operations/{operation_id}Get operation GET/operations/{operation_id}/reconciliation-previewReconciliation preview