BrainstormRouter

BrainstormRouter Security API

The security API from BrainstormRouter — 57 operation(s) for security.

GitHub OpenAPI

Operations 70

GET /attestation Build attestation bundle (commit, image digest, signer, Rekor URL, verify… #
GET /auth/security/owasp-coverage OWASP LLM Top 10 coverage assessment for the dashboard Compliance view #
GET /v1/a2a/agents List agents with active behavior certificates #
POST /v1/a2a/certificates Issue a behavior certificate to an agent (201) #
DELETE /v1/a2a/certificates/{agentId} Revoke an agent's behavior certificate (404 on missing) #
GET /v1/a2a/certificates/{agentId} Fetch an agent's behavior certificate (404 on missing) #
POST /v1/a2a/discover Discover agents in the tenant with their behavior-certificate capabilities #
POST /v1/a2a/send Send a message between agents; verifies behavior certificate + send_message… #
POST /v1/agent/auth/cert Exchange agent JWT + CSR for a signed mTLS client certificate #
POST /v1/agent/auth/revoke Revoke an agent certificate (single by serial, or bulk per tenant) #
POST /v1/agent/delegate Parent agent creates a child agent with sliced budget (agent-JWT only) #
POST /v1/agent/federated-bootstrap Federated agent bootstrap — external IDP JWT → BR session JWT #
GET /v1/agent/profiles List all agent profiles for the tenant #
POST /v1/agent/profiles Create a new agent profile (admin/operator) #
PATCH /v1/agent/profiles/lifecycle/{agentId} Transition an agent profile to a target lifecycle state #
GET /v1/agent/profiles/me Self-read agent profile (uses _agentIdentity) #
DELETE /v1/agent/profiles/{agentId} Archive (soft-delete) an agent profile #
GET /v1/agent/profiles/{agentId} Read a single agent profile by id #
PATCH /v1/agent/profiles/{agentId} Update an agent profile (admin/operator) #
GET /v1/agent/profiles/{agentId}/delegation-graph Return the parent/child delegation graph for an agent #
GET /v1/agent/profiles/{agentId}/versions Return up to 10 historical snapshots of an agent profile #
GET /v1/agent/sub-agents List sub-agents (children) of the calling agent #
DELETE /v1/agent/sub-agents/{child_agent_id} Terminate a sub-agent and reclaim its budget (caller must be parent) #
GET /v1/audit/events Search audit events (filterable by actor/action/resource/date range) #
GET /v1/audit/export Export audit events as CSV / JSON / CEF (raw Response with content-type) #
GET /v1/audit/retention Get current audit retention policy (days) #
PUT /v1/audit/retention Set audit retention policy (allowed: 7, 30, 90, 365, 1095, 2555 days) #
GET /v1/audit/verify Verify hash-chain integrity for the current tenant's audit trail #
GET /v1/firewall/interceptions List firewall interceptions (tool_firewall violations or guardrail warnings) #
POST /v1/killswitch/activate Emergency stop — suspend all routing for the authenticated tenant #
POST /v1/killswitch/deactivate Resume routing for the authenticated tenant #
POST /v1/killswitch/scope Activate a scoped kill switch (agent, tool, or provider) #
DELETE /v1/killswitch/scope/{type}/{id} Deactivate a scoped kill switch #
GET /v1/killswitch/scopes List all active scoped kill switches for the tenant #
GET /v1/killswitch/status Get current kill switch state + activation history #
GET /v1/mcp/registry List MCP servers registered for the current tenant #
POST /v1/mcp/registry Register a trusted MCP server for the current tenant #
DELETE /v1/mcp/registry/{id} Remove an MCP server from the tenant's registry #
POST /v1/moderations OpenAI-compatible moderation endpoint with BR jailbreak/PII layer #
GET /v1/security/anomalies Recent per-tenant anomaly alerts (process-local) #
GET /v1/security/anomalies/baselines Export the tenant's anomaly-detection baselines #
POST /v1/security/anomalies/baselines Import previously-exported anomaly-detection baselines #
GET /v1/security/anomalies/stats/{entityType}/{entityId}/{metric} Per-entity per-metric anomaly stats #
GET /v1/security/owasp-coverage OWASP LLM Top 10 coverage assessment for the current tenant's controls #
GET /v1/security/owasp-items OWASP LLM Top 10 item catalog (id, title, description, controls) #
GET /v1/security/policies Read the tenant's policy ruleset #
PUT /v1/security/policies Update the tenant's policy ruleset (invalidates policy-engine cache) #
GET /v1/security/policies/presets Built-in policy presets (e.g. L3 baseline) #
POST /v1/security/policies/test Evaluate a context against the tenant's policy ruleset #
GET /v1/security/policy-packs List the built-in policy pack library (named, versioned, framework-tagged) #
GET /v1/security/policy-packs/{id} Get one policy pack (full rules + framework mapping) #
DELETE /v1/security/processor-facts Clear the tenant's declared processor facts (self-service, API key) #
GET /v1/security/processor-facts Read back the tenant's parsed processor facts, with anything unparseable… #
POST /v1/security/processor-facts Persist the tenant's own processor facts so a constrained request can route… #
POST /v1/security/processor-facts/validate Dry-run validate processor facts before writing them to tenant settings #
GET /v1/security/red-team List red-team runs for the current tenant #
POST /v1/security/red-team Start an automated red-team run against a model #
GET /v1/security/red-team/categories Supported red-team categories #
GET /v1/security/red-team/{id} Fetch a red-team run by ID #
GET /v1/security/shadow-ai/alerts List shadow-AI alerts for the current tenant (filterable by type/severity) #
POST /v1/security/shadow-ai/alerts/{id}/ack Acknowledge a shadow-AI alert by ID #
POST /v1/security/shadow-ai/reset-baseline Reset the detection baseline for the current tenant #
GET /v1/security/shadow-ai/scan-config Get the scan configuration for the current tenant #
POST /v1/security/shadow-ai/scan-config Update the scan configuration (merges with existing config) #
POST /v1/security/shadow-ai/scan-now Trigger an immediate scan and return the execution record #
GET /v1/security/shadow-ai/scans/{id} Fetch a scan result by ID #
GET /v1/security/shadow-ai/summary Alert summary counts for the current tenant #
GET /v1/security/siem Get SIEM destination config (auth token never returned) #
PUT /v1/security/siem Set SIEM destination config (auth token KMS-encrypted) #
GET /v1/security/status Overall security posture — policy + anomaly tracking summary #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/brainstormrouter-com/openapi/brainstormrouter-com-security-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/brainstormrouter-com:brainstormrouter-com-security-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

brainstormrouter-com-security-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: BrainstormRouter Security API
  version: 1.0.0
  description: 'Autonomous AI API Engine — multi-tenant gateway that intelligently routes

    AI traffic across providers with built-in memory, cost optimization, and

    autonomous background processing.


    All `/v1/*` endpoints require an API key via `Authorization: Bearer `.'
  contact:
    name: BrainstormRouter
    url: https://brainstormrouter.com
  license:
    name: Proprietary
    identifier: LicenseRef-Proprietary
servers:
- url: https://api.brainstormrouter.com
  description: Production
security:
- BearerAuth: []
tags:


# --- truncated at 32 KB (61 KB total) ---
# Full source: https://artifacts.apis.io/brainstormrouter-com/openapi/brainstormrouter-com-security-api-openapi.yml