DevArmor

DevArmor Risks API

The risks API from DevArmor — 2 operation(s) for risks.

GitHub OpenAPI

Operations 5

GET /projects/{project_id}/threat-models/{threat_model_id}/versions/{version}/risks List risk in a project #
POST /projects/{project_id}/threat-models/{threat_model_id}/versions/{version}/risks Create a risk in a project #
GET /projects/{project_id}/threat-models/{threat_model_id}/versions/{version}/risks/{resource_id} Get a risk from a project #
PUT /projects/{project_id}/threat-models/{threat_model_id}/versions/{version}/risks/{resource_id} Update a threat model risk in a project #
DELETE /projects/{project_id}/threat-models/{threat_model_id}/versions/{version}/risks/{resource_id} Delete a threat model risk from a project #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/devarmor/openapi/devarmor-risks-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/devarmor/json-schema/devarmor-task-schema.json
📊
JSONSchema
https://artifacts.apis.io/devarmor/json-schema/devarmor-policy-schema.json
📊
JSONSchema
https://artifacts.apis.io/devarmor/json-schema/devarmor-control-schema.json
📊
JSONSchema
https://artifacts.apis.io/devarmor/json-schema/devarmor-threat-schema.json
📊
JSONSchema
https://artifacts.apis.io/devarmor/json-schema/devarmor-trust-boundary-schema.json
📊
JSONSchema
https://artifacts.apis.io/devarmor/json-schema/devarmor-rule-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/devarmor:devarmor-risks-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

devarmor-risks-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: DevArmor Security Reviews Risks API
  version: 1.14.0
tags:
- name: Risks
paths:
  /projects/{project_id}/threat-models/{threat_model_id}/versions/{version}/risks:
    get:
      tags:
      - Risks
      summary: List risk in a project
      operationId: list_project_threat_model_risk
      security:
      - APIGatewayAuth: []
      parameters:
      - name: project_id
        in: path
        required: true
        schema:
          type: string
          title: Project Id
      - name: version
        in: path
        required: true
        schema:
          type: string
          title: Version
      - name: threat_model_id
        in: path
        required: true
        schema:
          type: string
          title: Threat Model Id
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Risk'
                title: Response List Project Threat Model Risk
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
    post:
      tags:
      - Risks
      summary: Create a risk in a project
      operationId: create_project_threat_model_risk
      security:
      - APIGatewayAuth: []
      parameters:
      - name: project_id
        in: path
        required: true
        schema:
          type: string
          title: Project Id
      - name: version
        in: path
        required: true
        schema:
          type: string
          title: Version
      - name: threat_model_id
        in: path
        required: true
        schema:
          type: string
          title: Threat Model Id
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RiskCreate'
      responses:
        '201':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Risk'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /projects/{project_id}/threat-models/{threat_model_id}/versions/{version}/risks/{resource_id}:
    get:
      tags:
      - Risks
      summary: Get a risk from a project
      operationId: get_project_threat_model_risk
      security:
      - APIGatewayAuth: []
      parameters:
      - name: resource_id
        in: path
        required: true
        schema:
          type: string
          title: Resource Id
      - name: project_id
        in: path
        required: true
        schema:
          type: string
          title: Project Id
      - name: version
        in: path
        required: true
        schema:
          type: string
          title: Version
      - name: threat_model_id
        in: path
        required: true
        schema:
          type: string
          title: Threat Model Id
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Risk'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
    put:
      tags:
      - Risks
      summary: Update a threat model risk in a project
      operationId: update_project_threat_model_risk
      security:
      - APIGatewayAuth: []
      parameters:
      - name: resource_id
        in: path
        required: true
        schema:
          type: string
          title: Resource Id
      - name: project_id
        in: path
        required: true
        schema:
          type: string
          title: Project Id
      - name: version
        in: path
        required: true
        schema:
          type: string
          title: Version
      - name: threat_model_id
        in: path
        required: true
        schema:
          type: string
          title: Threat Model Id
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RiskUpdate'
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Risk'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
    delete:
      tags:
      - Risks
      summary: Delete a threat model risk from a project
      operationId: delete_project_threat_model_risk
      security:
      - APIGatewayAuth: []
      parameters:
      - name: resource_id
        in: path
        required: true
        schema:
          type: string
          title: Resource Id
      - name: project_id
        in: path
        required: true
        schema:
          type: string
          title: Project Id
      - name: version
        in: path
        required: true
        schema:
          type: string
          title: Version
      - name: threat_model_id
        in: path
        required: true
        schema:
          type: string
          title: Threat Model Id
      - name: force
        in: query
        required: false
        schema:
          type: boolean
          default: false
          title: Force
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RiskDelete'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
components:
  schemas:
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
            - type: string
            - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
        input:
          title: Input
        ctx:
          type: object
          title: Context
      type: object
      required:
      - loc
      - msg
      - type
      title: ValidationError
    Project:
      properties:
        symbolic_name:
          type: string
          pattern: ^[0-9a-z-]+$
          title: Symbolic Name
        title:
          type: string
          title: Title
        default:
          type: boolean
          title: Default
          default: false
        description:
          anyOf:
          - type: string
          - type: 'null'
          title: Description
        use_memory:
          type: boolean
          title: Use Memory
          default: true
        created_at:
          type: string
          format: date-time
          title: Created At
        updated_at:
          type: string
          format: date-time
          title: Updated At
        id:
          type: integer
          title: Id
        owner_user:
          $ref: '#/components/schemas/User'
        memory_effective:
          anyOf:
          - type: boolean
          - type: 'null'
          title: Memory Effective
        memory_effective_reason:
          anyOf:
          - type: string
          - type: 'null'
          title: Memory Effective Reason
      type: object
      required:
      - symbolic_name
      - title
      - id
      - owner_user
      title: Project
    Threat:
      properties:
        symbolic_name:
          type: string
          pattern: ^[0-9a-z-]+$
          title: Symbolic Name
        title:
          type: string
          title: Title
        description:
          type: string
          title: Description
        event:
          type: string
          title: Event
        sources:
          items:
            $ref: '#/components/schemas/ThreatSource'
          type: array
          title: Sources
        capec_attack_mechanism:
          anyOf:
          - type: integer
          - type: 'null'
          title: Capec Attack Mechanism
        cwe_vulnerabilities:
          anyOf:
          - items:
              type: integer
            type: array
          - type: 'null'
          title: Cwe Vulnerabilities
        stride_category:
          anyOf:
          - $ref: '#/components/schemas/ThreatSTRIDECategory'
          - type: 'null'
        scope_specific:
          type: boolean
          title: Scope Specific
          default: true
          deprecated: true
        created_at:
          type: string
          format: date-time
          title: Created At
        updated_at:
          type: string
          format: date-time
          title: Updated At
        id:
          type: integer
          title: Id
        project:
          $ref: '#/components/schemas/Project'
        threat_model_versions:
          items:
            type: string
            pattern: ^\d+(\.\d+)*$
          type: array
          title: Threat Model Versions
        threat_persona:
          anyOf:
          - $ref: '#/components/schemas/ThreatPersona'
          - type: 'null'
        components_affected:
          anyOf:
          - items:
              $ref: '#/components/schemas/Component'
            type: array
          - type: 'null'
          title: Components Affected
        mitre_attack_techniques:
          anyOf:
          - items:
              $ref: '#/components/schemas/RefMitreAttackTechnique'
            type: array
          - type: 'null'
          title: Mitre Attack Techniques
      type: object
      required:
      - symbolic_name
      - title
      - description
      - event
      - sources
      - id
      - project
      - threat_model_versions
      - threat_persona
      - components_affected
      title: Threat
    RiskDelete:
      properties:
        symbolic_name:
          type: string
          pattern: ^[0-9a-z-]+$
          title: Symbolic Name
        title:
          type: string
          title: Title
        description:
          type: string
          title: Description
        likelihood:
          $ref: '#/components/schemas/Likelihood'
        impact:
          $ref: '#/components/schemas/Impact'
        impact_description:
          anyOf:
          - type: string
          - type: 'null'
          title: Impact Description
      type: object
      required:
      - symbolic_name
      - title
      - description
      - likelihood
      - impact
      title: RiskDelete
    ThreatSTRIDECategory:
      type: string
      enum:
      - spoofing
      - tampering
      - repudiation
      - information_disclosure
      - denial_of_service
      - elevation_of_privilege
      title: ThreatSTRIDECategory
    Component:
      properties:
        symbolic_name:
          type: string
          pattern: ^[0-9a-z-]+$
          title: Symbolic Name
        title:
          type: string
          title: Title
        description:
          type: string
          title: Description
        repo_link:
          anyOf:
          - type: string
            maxLength: 2083
            minLength: 1
            format: uri
          - type: 'null'
          title: Repo Link
        created_at:
          type: string
          format: date-time
          title: Created At
        updated_at:
          type: string
          format: date-time
          title: Updated At
        id:
          type: integer
          title: Id
        project:
          $ref: '#/components/schemas/Project'
        threat_model_versions:
          items:
            type: string
            pattern: ^\d+(\.\d+)*$
          type: array
          title: Threat Model Versions
        parent_component:
          anyOf:
          - $ref: '#/components/schemas/Component'
          - type: 'null'
        trust_zone:
          anyOf:
          - $ref: '#/components/schemas/TrustZone'
          - type: 'null'
      type: object
      required:
      - symbolic_name
      - title
      - description
      - repo_link
      - id
      - project
      - threat_model_versions
      - trust_zone
      title: Component
    Degree:
      type: string
      enum:
      - minimal
      - low
      - moderate
      - high
      - maximal
      title: Degree
    Impact:
      type: string
      enum:
      - negligible
      - minor
      - moderate
      - major
      - severe
      title: Impact
    UserState:
      type: string
      enum:
      - active
      - inactive
      - pending_org_approval
      title: UserState
    Likelihood:
      type: string
      enum:
      - rare
      - unlikely
      - possible
      - likely
      - certain
      title: Likelihood
    RefMitreAttackTechnique:
      properties:
        id:
          type: string
          title: Id
        name:
          type: string
          title: Name
        tactics:
          items:
            $ref: '#/components/schemas/RefMitreAttackTactic'
          type: array
          title: Tactics
      type: object
      required:
      - id
      - name
      - tactics
      title: RefMitreAttackTechnique
    User:
      properties:
        email:
          type: string
          title: Email
        name:
          type: string
          title: Name
        state:
          $ref: '#/components/schemas/UserState'
          default: active
        roles:
          items:
            $ref: '#/components/schemas/UserRole'
          type: array
          title: Roles
          default: []
        created_at:
          type: string
          format: date-time
          title: Created At
        updated_at:
          type: string
          format: date-time
          title: Updated At
        id:
          type: integer
          title: Id
      type: object
      required:
      - email
      - name
      - id
      title: User
    RefMitreAttackTactic:
      properties:
        id:
          type: string
          title: Id
        name:
          type: string
          title: Name
      type: object
      required:
      - id
      - name
      title: RefMitreAttackTactic
    RiskCreate:
      properties:
        symbolic_name:
          type: 'null'
          title: Symbolic Name
        title:
          type: string
          title: Title
        description:
          type: string
          title: Description
        likelihood:
          $ref: '#/components/schemas/Likelihood'
        impact:
          $ref: '#/components/schemas/Impact'
        impact_description:
          anyOf:
          - type: string
          - type: 'null'
          title: Impact Description
        threat_ids:
          items:
            type: integer
          type: array
          title: Threat Ids
      type: object
      required:
      - title
      - description
      - likelihood
      - impact
      - threat_ids
      title: RiskCreate
    RiskUpdate:
      properties:
        symbolic_name:
          type: 'null'
          title: Symbolic Name
        title:
          anyOf:
          - type: string
          - type: 'null'
          title: Title
        description:
          anyOf:
          - type: string
          - type: 'null'
          title: Description
        likelihood:
          anyOf:
          - $ref: '#/components/schemas/Likelihood'
          - type: 'null'
        impact:
          anyOf:
          - $ref: '#/components/schemas/Impact'
          - type: 'null'
        impact_description:
          anyOf:
          - type: string
          - type: 'null'
          title: Impact Description
        threat_ids:
          anyOf:
          - items:
              type: integer
            type: array
          - type: 'null'
          title: Threat Ids
      type: object
      title: RiskUpdate
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    RiskLevelBand:
      type: string
      enum:
      - very_low
      - low
      - medium
      - high
      - very_high
      - critical
      title: RiskLevelBand
    TrustZone:
      properties:
        symbolic_name:
          type: string
          pattern: ^[0-9a-z-]+$
          title: Symbolic Name
        title:
          type: string
          title: Title
        description:
          type: string
          title: Description
        created_at:
          type: string
          format: date-time
          title: Created At
        updated_at:
          type: string
          format: date-time
          title: Updated At
        id:
          type: integer
          title: Id
        project:
          $ref: '#/components/schemas/Project'
        threat_model_versions:
          items:
            type: string
            pattern: ^\d+(\.\d+)*$
          type: array
          title: Threat Model Versions
      type: object
      required:
      - symbolic_name
      - title
      - description
      - id
      - project
      - threat_model_versions
      title: TrustZone
    AttackerSkillAndKnowledge:
      type: string
      enum:
      - script_kid
      - insider
      - engineer
      - expert_engineer
      - oc_sponsored
      - state_sponsored
      title: AttackerSkillAndKnowledge
    Risk:
      properties:
        symbolic_name:
          type: string
          pattern: ^[0-9a-z-]+$
          title: Symbolic Name
        title:
          type: string
          title: Title
        description:
          type: string
          title: Description
        likelihood:
          $ref: '#/components/schemas/Likelihood'
        impact:
          $ref: '#/components/schemas/Impact'
        impact_description:
          anyOf:
          - type: string
          - type: 'null'
          title: Impact Description
        created_at:
          type: string
          format: date-time
          title: Created At
        updated_at:
          type: string
          format: date-time
          title: Updated At
        id:
          type: integer
          title: Id
        threat_model_versions:
          items:
            type: string
            pattern: ^\d+(\.\d+)*$
          type: array
          title: Threat Model Versions
        threats:
          items:
            $ref: '#/components/schemas/Threat'
          type: array
          title: Threats
        score:
          type: integer
          maximum: 25.0
          minimum: 0.0
          title: Score
        level:
          $ref: '#/components/schemas/RiskLevelBand'
      type: object
      required:
      - symbolic_name
      - title
      - description
      - likelihood
      - impact
      - id
      - threat_model_versions
      - threats
      - score
      - level
      title: Risk
    UserRole:
      type: string
      enum:
      - admin
      - customer_support
      title: UserRole
    ThreatPersona:
      properties:
        symbolic_name:
          type: string
          pattern: ^[0-9a-z-]+$
          title: Symbolic Name
        title:
          type: string
          title: Title
        description:
          type: string
          title: Description
        is_person:
          type: boolean
          title: Is Person
        skill_level:
          $ref: '#/components/schemas/AttackerSkillAndKnowledge'
        access_level:
          $ref: '#/components/schemas/AccessLevel'
        malicious_intent:
          type: boolean
          title: Malicious Intent
        applicability_to_org:
          $ref: '#/components/schemas/Degree'
        created_at:
          type: string
          format: date-time
          title: Created At
        updated_at:
          type: string
          format: date-time
          title: Updated At
        id:
          type: integer
          title: Id
        project:
          $ref: '#/components/schemas/Project'
        threat_model_versions:
          items:
            type: string
            pattern: ^\d+(\.\d+)*$
          type: array
          title: Threat Model Versions
      type: object
      required:
      - symbolic_name
      - title
      - description
      - is_person
      - skill_level
      - access_level
      - malicious_intent
      - applicability_to_org
      - id
      - project
      - threat_model_versions
      title: ThreatPersona
    AccessLevel:
      type: string
      enum:
      - anonymous
      - user
      - admin
      title: AccessLevel
    ThreatSource:
      type: string
      enum:
      - adversary
      - human_error
      - failure
      - events_beyond_org_control
      title: ThreatSource
  securitySchemes:
    APIGatewayAuth:
      type: http
      scheme: bearer