# APIClarity BFLA Module API

**Canonical:** https://apis.io/apis/apiclarity/apiclarity-bfla-module-api/  
**Provider:** APIClarity — https://apis.io/providers/apiclarity/  
**Base URL:** https://apiclarity-server/api/modules/bfla  
**Documentation:** https://github.com/openclarity/apiclarity/tree/master/backend/pkg/modules/internal/bfla

APIClarity BFLA Module API is one of 11 APIs that [APIClarity](https://apis.io/providers/apiclarity/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include BFLA, Authorization, and API Security. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and a GitHub repository.

Broken Function Level Authorization detection. Learns an authorization model from observed API interactions — which callers are supposed to invoke which operations — then flags violations against it. Served under /api/modules/bfla in an APIClarity deployment.

## Operations (14)

| Method | Path | Summary |
|---|---|---|
| GET | `/version` | Get the version of this Module |
| POST | `/authorizationModel/{apiID}` | — |
| GET | `/authorizationModel/{apiID}` | — |
| GET | `/authorizationModel/{apiID}/state` | — |
| PUT | `/authorizationModel/{apiID}/approve` | — |
| PUT | `/authorizationModel/{apiID}/deny` | — |
| PUT | `/authorizationModel/{apiID}/learning/start` | — |
| POST | `/authorizationModel/{apiID}/reset` | — |
| PUT | `/authorizationModel/{apiID}/learning/stop` | — |
| PUT | `/authorizationModel/{apiID}/detection/start` | — |
| PUT | `/authorizationModel/{apiID}/detection/stop` | — |
| GET | `/event/{id}` | Get the event with the annotations and bfla status |
| PUT | `/event/{id}/{operation}` | — |
| GET | `/apiFindings/{apiID}` | Get findings for an API and module |

## Machine-readable artifacts (4)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/apiclarity/refs/heads/main/openapi/apiclarity-bfla-module-openapi.yml
- **Overlay** — https://raw.githubusercontent.com/api-evangelist/apiclarity/refs/heads/main/overlays/apiclarity-bfla-module-overlay.yaml
- **Documentation** — https://github.com/openclarity/apiclarity/blob/master/backend/pkg/modules/internal/bfla/README.md
- **GitHubRepository** — https://github.com/openclarity/apiclarity

## Other APIClarity APIs (10)

- [APIClarity API Events API](https://apis.io/apis/apiclarity/apiclarity-api-events-api/)
- [APIClarity API Inventory API](https://apis.io/apis/apiclarity/apiclarity-api-inventory-api/)
- [APIClarity Control API](https://apis.io/apis/apiclarity/apiclarity-control-api/)
- [APIClarity Features API](https://apis.io/apis/apiclarity/apiclarity-features-api/)
- [APIClarity Fuzzer Module API](https://apis.io/apis/apiclarity/apiclarity-fuzzer-module-api/)
- [APIClarity Trace Analyzer Module API](https://apis.io/apis/apiclarity/apiclarity-trace-analyzer-module-api/)
- [APIClarity Spec Differ Module API](https://apis.io/apis/apiclarity/apiclarity-spec-differ-module-api/)
- [APIClarity Spec Reconstructor Module API](https://apis.io/apis/apiclarity/apiclarity-spec-reconstructor-module-api/)
- [APIClarity Plugins Telemetry API](https://apis.io/apis/apiclarity/apiclarity-plugins-telemetry-api/)
- [APIClarity Notifications API](https://apis.io/apis/apiclarity/apiclarity-notifications-api/)

## Tags

BFLA, Authorization, API Security

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/apiclarity/apiclarity-bfla-module-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/apiclarity/.