CoreStack

CoreStack App Sec Ops API

Application Security

GitHub OpenAPI
Business capability
Vulnerability Management BC-620.40

Operations 49

POST /v1/appsecops/applications/batch List of application details #
POST /v1/appsecops/applications/create Creates an application #
GET /v1/appsecops/applications/item/{application_id} Get the application details #
POST /v1/appsecops/applications/item/{application_id} Update an application #
POST /v1/appsecops/applications/list List of Applications #
POST /v1/appsecops/bcs_questions/answers_version/create Create a new BCS answer version #
POST /v1/appsecops/bcs_questions/answers_version/history Paginated history of BCS answer versions #
GET /v1/appsecops/bcs_questions/list List of BCS questions #
POST /v1/appsecops/container/findings/batch List of container finding details #
POST /v1/appsecops/container/findings/ingest Ingest container security findings from external tools #
POST /v1/appsecops/container/findings/list List of container security findings with filtering and pagination support #
POST /v1/appsecops/dashboard/summary/portfolio_hierarchy List all Portfolios along with its associated applications and projects #
POST /v1/appsecops/dashboard/summary/sbom_components List of all SBOMs along with its associated components #
POST /v1/appsecops/dashboard/summary/sbom_vulnerabilities List of all SBOM vulnerabilities #
POST /v1/appsecops/dashboard/summary/version_diff Summary of differences in vulnerability and component counts compared to the… #
POST /v1/appsecops/dashboard/top_actionable_issues List top (x) actionable issues including vulnerabilities, threats and config… #
POST /v1/appsecops/dashboard/vulnerabilities/aggregation_by_component List of aggregated vulnerability count by component properties #
POST /v1/appsecops/dashboard/vulnerabilities/trend_by_severity List of vulnerabilities count by severity #
POST /v1/appsecops/portfolios/batch List of portfolio details #
POST /v1/appsecops/portfolios/create Creates a portfolio #
GET /v1/appsecops/portfolios/item/{portfolio_id} Get the portfolio details #
POST /v1/appsecops/portfolios/item/{portfolio_id} Update the portfolio details #
POST /v1/appsecops/portfolios/list List of portfolios #
POST /v1/appsecops/projects/batch List of project details #
POST /v1/appsecops/projects/create Creates a project #
GET /v1/appsecops/projects/item/{project_id} Get the project details #
POST /v1/appsecops/projects/item/{project_id} Update the project details #
POST /v1/appsecops/projects/list List of projects #
POST /v1/appsecops/sbom_components/batch List of sbom component details #
POST /v1/appsecops/sbom_definition/batch List of SBOM definition details #
POST /v1/appsecops/sbom_definition/create Creates a SBOM definition #
GET /v1/appsecops/sbom_definition/item/{sbom_id} Get SBOM definition details #
POST /v1/appsecops/sbom_definition/item/{sbom_id} Update SBOM definition details #
GET /v1/appsecops/sbom_definition/item/{sbom_id}/list_version List of versions for a SBOM definition #
POST /v1/appsecops/sbom_definition/list List of SBOM definitions #
POST /v1/appsecops/sbom_version/batch List of SBOM version details #
POST /v1/appsecops/sbom_version/create Creates a SBOM Version #
POST /v1/appsecops/sbom_version/diff/batch List of SBOM version difference details between the given SBOM version IDs and… #
DELETE /v1/appsecops/sbom_version/item/{version_id} Delete SBOM version #
GET /v1/appsecops/sbom_version/item/{version_id} Get SBOM version details #
POST /v1/appsecops/sbom_version/item/{version_id} Update SBOM version details #
POST /v1/appsecops/sbom_version/item/{version_id}/diff Fetch SBOM version component and vulnerability difference details #
GET /v1/appsecops/sbom_version/item/{version_id}/make-release Make SBOM version as the Release version #
POST /v1/appsecops/sbom_version/vulnerabilities/batch List of SBOM version vulnerabilities details #
POST /v1/appsecops/vulnerabilities/prevalence/organization List of organization(s) details where the vulnerabilities are prevalent #
POST /v1/secops/vulnerabilities/batch List of vulnerability details #
POST /v2/appsecops/applications/create Create an application with BCS scoring #
GET /v2/appsecops/applications/item/{application_id} Get application details with BCS scoring #
POST /v2/appsecops/applications/item/{application_id} Update application with BCS scoring #

Documentation

📖
Documentation
https://docs.corestack.io/docs/corestack-api-modules
📖
APIReference
https://docs.corestack.io/reference
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/corestack/refs/heads/main/authentication/corestack-authentication.yml

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/corestack/refs/heads/main/openapi/corestack-appsecops-api-openapi.yml

Other Resources

🔗
Conventions
https://raw.githubusercontent.com/api-evangelist/corestack/refs/heads/main/conventions/corestack-conventions.yml
🔗
ErrorCatalog
https://raw.githubusercontent.com/api-evangelist/corestack/refs/heads/main/errors/corestack-problem-types.yml
🔗
DataModel
https://raw.githubusercontent.com/api-evangelist/corestack/refs/heads/main/data-model/corestack-data-model.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/corestack-appsecops-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

corestack-appsecops-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: CoreStack External App Sec Ops API
  version: 1.0.0
  termsOfService: http://corestack.io/
  license:
    name: CoreStack Inc License
    url: http://corestack.io/licenses/LICENSE-2.0.html
  description: Application Security
servers:
- url: /
tags:


# --- truncated at 32 KB (168 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/corestack/refs/heads/main/openapi/corestack-appsecops-api-openapi.yml