# BrainstormRouter Security API

**Canonical:** https://apis.io/apis/brainstormrouter-com/brainstormrouter-com-security-api/  
**Provider:** BrainstormRouter — https://apis.io/providers/brainstormrouter-com/  
**Base URL:** https://api.brainstormrouter.com  
**Documentation:** https://brainstormrouter.com/developers

BrainstormRouter Security API is one of 73 APIs that [BrainstormRouter](https://apis.io/providers/brainstormrouter-com/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Security. The published artifact set on APIs.io includes an OpenAPI specification.

The security API from BrainstormRouter — 57 operation(s) for security.

## Operations (60 of 70)

| Method | Path | Summary |
|---|---|---|
| GET | `/attestation` | Build attestation bundle (commit, image digest, signer, Rekor URL, verify… |
| GET | `/auth/security/owasp-coverage` | OWASP LLM Top 10 coverage assessment for the dashboard Compliance view |
| GET | `/v1/a2a/agents` | List agents with active behavior certificates |
| POST | `/v1/a2a/certificates` | Issue a behavior certificate to an agent (201) |
| DELETE | `/v1/a2a/certificates/{agentId}` | Revoke an agent's behavior certificate (404 on missing) |
| GET | `/v1/a2a/certificates/{agentId}` | Fetch an agent's behavior certificate (404 on missing) |
| POST | `/v1/a2a/discover` | Discover agents in the tenant with their behavior-certificate capabilities |
| POST | `/v1/a2a/send` | Send a message between agents; verifies behavior certificate + send_message… |
| POST | `/v1/agent/auth/cert` | Exchange agent JWT + CSR for a signed mTLS client certificate |
| POST | `/v1/agent/auth/revoke` | Revoke an agent certificate (single by serial, or bulk per tenant) |
| POST | `/v1/agent/delegate` | Parent agent creates a child agent with sliced budget (agent-JWT only) |
| POST | `/v1/agent/federated-bootstrap` | Federated agent bootstrap — external IDP JWT → BR session JWT |
| GET | `/v1/agent/profiles` | List all agent profiles for the tenant |
| POST | `/v1/agent/profiles` | Create a new agent profile (admin/operator) |
| PATCH | `/v1/agent/profiles/lifecycle/{agentId}` | Transition an agent profile to a target lifecycle state |
| GET | `/v1/agent/profiles/me` | Self-read agent profile (uses _agentIdentity) |
| DELETE | `/v1/agent/profiles/{agentId}` | Archive (soft-delete) an agent profile |
| GET | `/v1/agent/profiles/{agentId}` | Read a single agent profile by id |
| PATCH | `/v1/agent/profiles/{agentId}` | Update an agent profile (admin/operator) |
| GET | `/v1/agent/profiles/{agentId}/delegation-graph` | Return the parent/child delegation graph for an agent |
| GET | `/v1/agent/profiles/{agentId}/versions` | Return up to 10 historical snapshots of an agent profile |
| GET | `/v1/agent/sub-agents` | List sub-agents (children) of the calling agent |
| DELETE | `/v1/agent/sub-agents/{child_agent_id}` | Terminate a sub-agent and reclaim its budget (caller must be parent) |
| GET | `/v1/audit/events` | Search audit events (filterable by actor/action/resource/date range) |
| GET | `/v1/audit/export` | Export audit events as CSV / JSON / CEF (raw Response with content-type) |
| GET | `/v1/audit/retention` | Get current audit retention policy (days) |
| PUT | `/v1/audit/retention` | Set audit retention policy (allowed: 7, 30, 90, 365, 1095, 2555 days) |
| GET | `/v1/audit/verify` | Verify hash-chain integrity for the current tenant's audit trail |
| GET | `/v1/firewall/interceptions` | List firewall interceptions (tool_firewall violations or guardrail warnings) |
| POST | `/v1/killswitch/activate` | Emergency stop — suspend all routing for the authenticated tenant |
| POST | `/v1/killswitch/deactivate` | Resume routing for the authenticated tenant |
| POST | `/v1/killswitch/scope` | Activate a scoped kill switch (agent, tool, or provider) |
| DELETE | `/v1/killswitch/scope/{type}/{id}` | Deactivate a scoped kill switch |
| GET | `/v1/killswitch/scopes` | List all active scoped kill switches for the tenant |
| GET | `/v1/killswitch/status` | Get current kill switch state + activation history |
| GET | `/v1/mcp/registry` | List MCP servers registered for the current tenant |
| POST | `/v1/mcp/registry` | Register a trusted MCP server for the current tenant |
| DELETE | `/v1/mcp/registry/{id}` | Remove an MCP server from the tenant's registry |
| POST | `/v1/moderations` | OpenAI-compatible moderation endpoint with BR jailbreak/PII layer |
| GET | `/v1/security/anomalies` | Recent per-tenant anomaly alerts (process-local) |
| GET | `/v1/security/anomalies/baselines` | Export the tenant's anomaly-detection baselines |
| POST | `/v1/security/anomalies/baselines` | Import previously-exported anomaly-detection baselines |
| GET | `/v1/security/anomalies/stats/{entityType}/{entityId}/{metric}` | Per-entity per-metric anomaly stats |
| GET | `/v1/security/owasp-coverage` | OWASP LLM Top 10 coverage assessment for the current tenant's controls |
| GET | `/v1/security/owasp-items` | OWASP LLM Top 10 item catalog (id, title, description, controls) |
| GET | `/v1/security/policies` | Read the tenant's policy ruleset |
| PUT | `/v1/security/policies` | Update the tenant's policy ruleset (invalidates policy-engine cache) |
| GET | `/v1/security/policies/presets` | Built-in policy presets (e.g. L3 baseline) |
| POST | `/v1/security/policies/test` | Evaluate a context against the tenant's policy ruleset |
| GET | `/v1/security/policy-packs` | List the built-in policy pack library (named, versioned, framework-tagged) |
| GET | `/v1/security/policy-packs/{id}` | Get one policy pack (full rules + framework mapping) |
| DELETE | `/v1/security/processor-facts` | Clear the tenant's declared processor facts (self-service, API key) |
| GET | `/v1/security/processor-facts` | Read back the tenant's parsed processor facts, with anything unparseable… |
| POST | `/v1/security/processor-facts` | Persist the tenant's own processor facts so a constrained request can route… |
| POST | `/v1/security/processor-facts/validate` | Dry-run validate processor facts before writing them to tenant settings |
| GET | `/v1/security/red-team` | List red-team runs for the current tenant |
| POST | `/v1/security/red-team` | Start an automated red-team run against a model |
| GET | `/v1/security/red-team/categories` | Supported red-team categories |
| GET | `/v1/security/red-team/{id}` | Fetch a red-team run by ID |
| GET | `/v1/security/shadow-ai/alerts` | List shadow-AI alerts for the current tenant (filterable by type/severity) |

…and 10 more operations. They are listed in full on the page.

## Machine-readable artifacts (1)

- **OpenAPI** — https://artifacts.apis.io/brainstormrouter-com/openapi/brainstormrouter-com-security-api-openapi.yml

## Other BrainstormRouter APIs (12)

- [BrainstormRouter A2a API](https://apis.io/apis/brainstormrouter-com/brainstormrouter-com-a2a-api/)
- [BrainstormRouter Admin API](https://apis.io/apis/brainstormrouter-com/brainstormrouter-com-admin-api/)
- [BrainstormRouter Agent API](https://apis.io/apis/brainstormrouter-com/brainstormrouter-com-agent-api/)
- [BrainstormRouter Agent Bootstrap API](https://apis.io/apis/brainstormrouter-com/brainstormrouter-com-agent-bootstrap-api/)
- [BrainstormRouter Agent Manifests API](https://apis.io/apis/brainstormrouter-com/brainstormrouter-com-agent-manifests-api/)
- [BrainstormRouter Agent Onboarding API](https://apis.io/apis/brainstormrouter-com/brainstormrouter-com-agent-onboarding-api/)
- [BrainstormRouter Agent Profiles API](https://apis.io/apis/brainstormrouter-com/brainstormrouter-com-agent-profiles-api/)
- [BrainstormRouter Agents API](https://apis.io/apis/brainstormrouter-com/brainstormrouter-com-agents-api/)
- [BrainstormRouter Analytics API](https://apis.io/apis/brainstormrouter-com/brainstormrouter-com-analytics-api/)
- [BrainstormRouter Anomaly API](https://apis.io/apis/brainstormrouter-com/brainstormrouter-com-anomaly-api/)
- [BrainstormRouter API Keys API](https://apis.io/apis/brainstormrouter-com/brainstormrouter-com-api-keys-api/)
- [BrainstormRouter Approvals API](https://apis.io/apis/brainstormrouter-com/brainstormrouter-com-approvals-api/)

## Tags

Security

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/brainstormrouter-com/brainstormrouter-com-security-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/brainstormrouter-com/.