# EchelonGraph API

**Canonical:** https://apis.io/apis/echelongraph-io/echelongraph-io-api/  
**Provider:** EchelonGraph — https://apis.io/providers/echelongraph-io/  
**Base URL:** https://app.echelongraph.io  
**Documentation:** https://echelongraph.io/pulse/api

EchelonGraph API is published by [EchelonGraph](https://apis.io/providers/echelongraph-io/) on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. The published artifact set on APIs.io includes an OpenAPI specification and 6 JSON Schemas.

EchelonGraph API as documented publicly: 23 operations. Contract generated from the documentation by API Evangelist (2026-11-06); not the provider's own document.

## Operations (23)

| Method | Path | Summary |
|---|---|---|
| GET | `/api/v1/auth/tokens` | GET /api/v1/auth/tokens |
| GET | `/api/v1/logs` | GET /api/v1/logs |
| GET | `/api/v1/public/cves` | The main feed — paginated JSON list, newest first. |
| POST | `/api/v1/public/cves/CVE-2021-44228` | POST /api/v1/public/cves/CVE-2021-44228 |
| POST | `/api/v1/public/cves/match/batch` | The registry match for up to 200 components in one call. |
| GET | `/api/v1/public/cves/{id}/references` | Per-reference enrichment for one CVE — vendor advisory cross-walks, patch URLs, exploit POC indicators where surfaced. |
| GET | `/api/v1/public/cves/{id}/related` | Three lists of related CVEs, up to 10 each. |
| GET | `/api/v1/public/kev/recent` | CVE & exposure intelligence, inside your AI tools |
| GET | `/api/v1/public/vendor-advisories` | Vendor-disclosed security advisories (Microsoft MSRC, Red Hat RHSA, GitHub GHSA, Cisco PSIRT, AWS, GCP, GitLab). |
| GET | `/api/v1/public/vendor-advisories/{vendor}/{advisoryId}` | Single vendor-advisory detail — title, description, CVSS, affected products, remediation, references, linked CVE IDs. |
| POST | `/api/v1/scan/iac` | Shift‑left CI/CD gate – Developer opens a PR → POST /api/v1/scan/iac (Bearer ek_…). Verdict blocks a bad terraform apply before deploy. |
| DELETE | `/collections` | Shadow AI Radar — Publicly Observed AI Infrastructure |
| GET | `/insecure/plain/local:///path/to/ico-oob.ico@png` | GET /insecure/plain/local:///path/to/ico-oob.ico@png |
| GET | `/insecure/plain/local:///path/to/normal.ico@png` | GET /insecure/plain/local:///path/to/normal.ico@png |
| GET | `/model-versions/get-artifact` | Shadow AI Radar — Publicly Observed AI Infrastructure |
| GET | `/models` | Shadow AI Radar — Publicly Observed AI Infrastructure |
| POST | `/models` | Shadow AI Radar — Publicly Observed AI Infrastructure |
| GET | `/signalk/v2/api/resources/{resourcetype}/{resourceid}` | Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution |
| POST | `/skServer/providers` | Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution |
| GET | `/sse` | Shadow AI Radar — Publicly Observed AI Infrastructure |
| POST | `/v1/auth/oidc/login` | POST /v1/auth/oidc/login |
| GET | `/v1/models` | Shadow AI Radar — Publicly Observed AI Infrastructure |
| POST | `/v1/transit/decrypt/echelongraph` | Customer's KMS POST https://vault.acme.com/v1/transit/decrypt/echelongraph |

## Machine-readable artifacts (8)

- **OpenAPI** — https://artifacts.apis.io/echelongraph-io/openapi/_ae-authored/echelongraph-io-openapi-generated.yml
- **JSONSchema** — https://artifacts.apis.io/echelongraph-io/json-schema/echelongraph-io-post-api-v1-public-cves-match-batch-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/echelongraph-io/json-schema/echelongraph-io-get-api-v1-public-vendor-advisories-vendor-advisoryid-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/echelongraph-io/json-schema/echelongraph-io-post-skserver-providers-request-schema.json
- **JSONSchema** — https://artifacts.apis.io/echelongraph-io/json-schema/echelongraph-io-get-api-v1-public-cves-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/echelongraph-io/json-schema/echelongraph-io-get-api-v1-public-cves-id-related-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/echelongraph-io/json-schema/echelongraph-io-post-api-v1-scan-iac-response-schema.json
- **APIsJSON** — https://artifacts.apis.io/echelongraph-io/apis.yml

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/echelongraph-io/echelongraph-io-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/echelongraph-io/.