Cloudsmith vulnerabilities API

The vulnerabilities API from Cloudsmith — 4 operation(s) for vulnerabilities.

Operations 4

GET /vulnerabilities/{owner}/ Lists scan results for a specific namespace. #
GET /vulnerabilities/{owner}/{repo}/ Lists scan results for a specific repository. #
GET /vulnerabilities/{owner}/{repo}/{package}/ Lists scan results for a specific package. #
GET /vulnerabilities/{owner}/{repo}/{package}/{identifier}/ Get a scan result. #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/cloudsmith-vulnerabilities-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

cloudsmith-vulnerabilities-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Cloudsmith API (v1) audit-log Vulnerabilities API
  description: The API to the Cloudsmith Service
  termsOfService: https://help.cloudsmith.io
  contact:
    name: Cloudsmith Support
    url: https://help.cloudsmith.io
    email: support@cloudsmith.io
  license:
    name: MIT
    url: https://opensource.org/licenses/MIT
  version: v1
servers:
- url: https://api.cloudsmith.io/
security:
- apikey: []
- basic: []
tags:
- name: vulnerabilities
paths:
  /vulnerabilities/{owner}/:
    parameters:
    - name: owner
      in: path
      required: true
      schema:
        type: string
    get:
      operationId: vulnerabilities_namespace_list
      summary: Lists scan results for a specific namespace.
      description: Lists scan results for a specific namespace.
      parameters:
      - name: page
        in: query
        description: A page number within the paginated result set.
        required: false
        schema:
          type: integer
      - name: page_size
        in: query
        description: Number of results to return per page.
        required: false
        schema:
          type: integer
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/VulnerabilityScanResultsList'
        '400':
          description: Request could not be processed (see detail).
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorDetail'
        '422':
          description: Missing or invalid parameters (see detail).
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorDetail'
      tags:
      - vulnerabilities
  /vulnerabilities/{owner}/{repo}/:
    parameters:
    - name: owner
      in: path
      required: true
      schema:
        type: string
    - name: repo
      in: path
      required: true
      schema:
        type: string
    get:
      operationId: vulnerabilities_repo_list
      summary: Lists scan results for a specific repository.
      description: Lists scan results for a specific repository.
      parameters:
      - name: page
        in: query
        description: A page number within the paginated result set.
        required: false
        schema:
          type: integer
      - name: page_size
        in: query
        description: Number of results to return per page.
        required: false
        schema:
          type: integer
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/VulnerabilityScanResultsList'
        '400':
          description: Request could not be processed (see detail).
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorDetail'
        '422':
          description: Missing or invalid parameters (see detail).
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorDetail'
      tags:
      - vulnerabilities
  /vulnerabilities/{owner}/{repo}/{package}/:
    parameters:
    - name: owner
      in: path
      required: true
      schema:
        type: string
    - name: repo
      in: path
      required: true
      schema:
        type: string
    - name: package
      in: path
      required: true
      schema:
        type: string
    get:
      operationId: vulnerabilities_package_list
      summary: Lists scan results for a specific package.
      description: Lists scan results for a specific package.
      parameters:
      - name: page
        in: query
        description: A page number within the paginated result set.
        required: false
        schema:
          type: integer
      - name: page_size
        in: query
        description: Number of results to return per page.
        required: false
        schema:
          type: integer
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/VulnerabilityScanResultsList'
        '400':
          description: Request could not be processed (see detail).
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorDetail'
        '422':
          description: Missing or invalid parameters (see detail).
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorDetail'
      tags:
      - vulnerabilities
  /vulnerabilities/{owner}/{repo}/{package}/{identifier}/:
    parameters:
    - name: owner
      in: path
      required: true
      schema:
        type: string
    - name: repo
      in: path
      required: true
      schema:
        type: string
    - name: package
      in: path
      required: true
      schema:
        type: string
    - name: identifier
      in: path
      required: true
      schema:
        type: string
    get:
      operationId: vulnerabilities_read
      summary: Get a scan result.
      description: Get a scan result.
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VulnerabilityScanResults'
        '400':
          description: Request could not be processed (see detail).
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorDetail'
        '422':
          description: Missing or invalid parameters (see detail).
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorDetail'
      tags:
      - vulnerabilities
components:
  schemas:
    VulnerabilityScanResults:
      required:
      - identifier
      - package
      - scan_id
      - scans
      type: object
      properties:
        created_at:
          title: Created at
          description: The time this scan result was stored.
          type: string
          format: date-time
          readOnly: true
        has_vulnerabilities:
          title: Has vulnerabilities
          description: Do the results contain any known vulnerabilities?
          type: boolean
          readOnly: true
        identifier:
          title: Identifier
          type: string
          minLength: 1
        max_severity:
          title: Max severity
          type: string
          enum:
          - Unknown
          - Low
          - Medium
          - High
          - Critical
          default: Unknown
        num_vulnerabilities:
          title: Num vulnerabilities
          type: integer
          default: 0
        package:
          $ref: '#/components/schemas/PackageVulnerability'
        scan_id:
          title: Scan id
          description: 'Deprecated (23-05-15): Please use ''identifier'' instead. Previously: A monotonically increasing number that identified a scan within a repository.'
          type:
          - integer
          - 'null'
        scans:
          type: array
          items:
            $ref: '#/components/schemas/VulnerabilityScan'
    VulnerabilityScanResultsList:
      required:
      - identifier
      - package
      - scan_id
      type: object
      properties:
        created_at:
          title: Created at
          description: The time this scan result was stored.
          type: string
          format: date-time
          readOnly: true
        has_vulnerabilities:
          title: Has vulnerabilities
          description: Do the results contain any known vulnerabilities?
          type: boolean
          readOnly: true
        identifier:
          title: Identifier
          type: string
          minLength: 1
        max_severity:
          title: Max severity
          type: string
          enum:
          - Unknown
          - Low
          - Medium
          - High
          - Critical
          default: Unknown
        num_vulnerabilities:
          title: Num vulnerabilities
          type: integer
          default: 0
        package:
          $ref: '#/components/schemas/PackageVulnerability'
        scan_id:
          title: Scan id
          description: 'Deprecated (23-05-15): Please use ''identifier'' instead. Previously: A monotonically increasing number that identified a scan within a repository.'
          type:
          - integer
          - 'null'
    VulnerabilityScan:
      required:
      - results
      - target
      - type
      type: object
      properties:
        results:
          type: array
          items:
            $ref: '#/components/schemas/Vulnerability'
        target:
          title: Target
          type: string
          minLength: 1
        type:
          title: Type
          type: string
          minLength: 1
    VulnerabilityScanVersion:
      required:
      - major
      - minor
      - patch
      type: object
      properties:
        major:
          title: Major
          type: integer
        minor:
          title: Minor
          type: integer
        operator:
          title: Operator
          type: string
          default: ''
          maxLength: 32
        patch:
          title: Patch
          type: integer
        raw_version:
          title: Raw version
          type: string
          default: ''
          maxLength: 1024
        version:
          title: Version
          type: string
          default: ''
          maxLength: 1024
    ErrorDetail:
      required:
      - detail
      type: object
      properties:
        detail:
          title: Detail
          description: An extended message for the response.
          type: string
          minLength: 1
        fields:
          title: Fields
          description: 'A Dictionary of related errors where key: Field and value: Array of Errors related to that field'
          type: object
          additionalProperties:
            type: array
            items:
              type: string
              minLength: 1
    PackageVulnerability:
      required:
      - identifier
      type: object
      properties:
        identifier:
          title: Identifier
          type: string
          minLength: 1
        name:
          title: Name
          description: The name of this package.
          type:
          - string
          - 'null'
          readOnly: true
        url:
          title: Url
          type:
          - string
          - 'null'
          format: uri
          readOnly: true
        version:
          title: Version
          description: The raw version for this package.
          type:
          - string
          - 'null'
          readOnly: true
    Vulnerability:
      required:
      - affected_version
      - description
      - fixed_version
      - package_name
      - references
      - severity_source
      - title
      - vulnerability_id
      type: object
      properties:
        affected_version:
          $ref: '#/components/schemas/VulnerabilityScanVersion'
        cvss_scores:
          title: Cvss scores
          description: CVSS Scores (when available from the raw scan results)
          type: object
          additionalProperties:
            type: object
            additionalProperties:
              type: object
          readOnly: true
        description:
          title: Description
          type: string
          maxLength: 1028
          minLength: 1
        fixed_version:
          $ref: '#/components/schemas/VulnerabilityScanVersion'
        package_name:
          title: Package name
          type: string
          maxLength: 128
          minLength: 1
        references:
          type: array
          items:
            type: string
            maxLength: 2048
            minLength: 1
        severity:
          title: Severity
          type: string
          enum:
          - Unknown
          - Low
          - Medium
          - High
          - Critical
          default: Unknown
        severity_source:
          title: Severity source
          type: string
          maxLength: 128
          minLength: 1
        title:
          title: Title
          type: string
          maxLength: 512
          minLength: 1
        vulnerability_id:
          title: Vulnerability id
          type: string
          maxLength: 13
          minLength: 1
  securitySchemes:
    apikey:
      type: apiKey
      name: X-Api-Key
      in: header
    basic:
      type: http
      scheme: basic