Root (fka Slim.ai) Discovery API
The Discovery API from Root (fka Slim.ai) — 2 operation(s) for discovery.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/root-fka-slimai-discovery-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
description: This is the API documentation for Root.io.
title: Root.io Discovery API
termsOfService: https://www.root.io/terms-of-service
contact: {}
version: '1.0'
servers:
- url: https://api.root.io
tags:
- name: Discovery
paths:
/v3/discovery:
post:
security:
- BasicAuth: []
description: 'Creates complete CVE record chain: scan_packages, cves, cve_tickets, unpatched_cve_metadata'
tags:
- Discovery
summary: Create discovered package with CVE
responses:
'201':
description: Created
content:
application/json:
schema:
$ref: '#/components/schemas/discovery.CreateDiscoveredPackageResponse'
'400':
description: Bad Request
content:
application/json:
schema:
type: string
'401':
description: Account not found in context
content:
application/json:
schema:
type: string
'409':
description: CVE already exists
content:
application/json:
schema:
type: string
'500':
description: Internal Server Error
content:
application/json:
schema:
type: string
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/discovery.CreateDiscoveredPackageRequest'
description: Package and CVE data
required: true
operationId: postV3Discovery
x-operation-id-source: derived
/v3/discovery/bulk:
post:
security:
- BasicAuth: []
description: 'Persists the array to bulk_discovery_jobs, atomically XADDs each item
to the cve_discovery_events Redis stream, and best-effort deletes the
row on success. Items are then processed asynchronously by
packages-events-consumer (same write path as the single endpoint).'
tags:
- Discovery
summary: Bulk discover packages with CVEs (async)
responses:
'202':
description: Accepted
content:
application/json:
schema:
$ref: '#/components/schemas/discovery.CreateDiscoveredPackagesBulkResponse'
'400':
description: Bad Request
content:
application/json:
schema:
type: string
'401':
description: Account not found in context
content:
application/json:
schema:
type: string
'413':
description: Request body exceeds 32MB
content:
application/json:
schema:
type: string
'500':
description: Internal Server Error
content:
application/json:
schema:
type: string
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/discovery.CreateDiscoveredPackagesBulkRequest'
description: Array of items
required: true
operationId: postV3DiscoveryBulk
x-operation-id-source: derived
components:
schemas:
discovery.CreateDiscoveredPackagesBulkRequest:
type: object
required:
- items
properties:
items:
type: array
minItems: 1
items:
$ref: '#/components/schemas/discovery.CreateDiscoveredPackageRequest'
discovery.CreateDiscoveredPackagesBulkResponse:
type: object
properties:
bulk_job_id:
type: string
item_count:
type: integer
discovery.CreateDiscoveredPackageResponse:
type: object
properties:
cve_ids:
type: array
items:
type: string
cve_ticket_id:
type: string
jira_ticket_id:
type: string
metadata_id:
type: string
scan_package_id:
type: string
EmbeddedRef:
type: object
properties:
name:
description: parent name, e.g. "setuptools"
type: string
path:
description: Path locates the inner *.dist-info; absolute on scans, relative on audit rows.
type: string
version:
description: parent version, e.g. "65.5.0"
type: string
v3.CVESeverity:
type: string
enum:
- critical
- high
- medium
- low
- unknown
x-enum-varnames:
- CveSeverityCritical
- CveSeverityHigh
- CveSeverityMedium
- CveSeverityLow
- CveSeverityUnknown
Arch:
type: string
enum:
- arm64
- amd64
- x86
- aarch64
- arm
- ppc64
- ppc64le
- mips
- mips64
- mips64le
- mipsle
x-enum-varnames:
- ArchARM64
- ArchAmd64
- ArchX86
- ArchAARCH64
- ArchARM
- ArchPPC64
- ArchPPC
- ArchMIPS
- ArchMIPS64
- ArchMIPS64LE
- ArchMIPSLE
discovery.CreateDiscoveredPackageRequest:
type: object
required:
- cve_id
- ecosystem
- package_src_name
- severity
properties:
arch:
$ref: '#/components/schemas/Arch'
cve_id:
type: string
cvss_score:
description: CVE metadata — written to cves and dual-written to patcher.cve_metadata
type: number
cvss_vector:
type: string
description:
type: string
ecosystem:
type: string
embedded_in:
$ref: '#/components/schemas/EmbeddedRef'
fixed_in_version:
type: string
installation_path:
type: string
licenses:
description: Package metadata — written to scan_packages
type: array
items:
type: string
nvd_link:
type: string
os_distro_major:
type: string
package_purl:
type: string
package_src_name:
type: string
package_version:
type: string
published_at:
type: string
severity:
$ref: '#/components/schemas/v3.CVESeverity'
title:
type: string
securitySchemes:
BasicAuth:
type: http
scheme: basic