Root (fka Slim.ai) Package API
The Package API from Root (fka Slim.ai) — 4 operation(s) for package.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/root-fka-slimai-package-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
description: This is the API documentation for Root.io.
title: Root.io Accounts Package API
termsOfService: https://www.root.io/terms-of-service
contact: {}
version: '1.0'
servers:
- url: https://api.root.io
tags:
- name: Package
paths:
/v3/packages:
get:
security:
- BasicAuth: []
description: Retrieves packages from vulnerability scans with cursor-based pagination and comprehensive filtering
tags:
- Package
summary: List packages with pagination and filtering
parameters:
- description: After cursor for next page
name: after
in: query
schema:
type: string
- description: Before cursor for previous page
name: before
in: query
schema:
type: string
- description: Page size (max 1000)
name: limit
in: query
schema:
type: integer
default: 100
- description: Ordering (e.g., 'created_at:desc')
name: order
in: query
style: form
explode: true
schema:
type: array
items:
type: string
- description: Filter by AVR Scan IDs
name: avr_scan_ids
in: query
style: form
explode: true
schema:
type: array
items:
type: string
- description: Filter by architectures
name: arch
in: query
style: form
explode: true
schema:
type: array
items:
enum:
- arm64
- amd64
type: string
- description: Filter by ecosystems
name: ecosystem
in: query
style: form
explode: true
schema:
type: array
items:
type: string
- description: Filter by OS distro releases
name: os_distro_release
in: query
style: form
explode: true
schema:
type: array
items:
type: string
- description: Filter by package versions
name: versions
in: query
style: form
explode: true
schema:
type: array
items:
type: string
- description: Fuzzy filter on package name
name: name
in: query
schema:
type: string
- description: Fuzzy filter on source package name
name: src_name
in: query
schema:
type: string
- description: Filter by licenses
name: licenses
in: query
style: form
explode: true
schema:
type: array
items:
type: string
- description: Filter by CVE IDs
name: cve_ids
in: query
style: form
explode: true
schema:
type: array
items:
type: string
- description: Filter by CVE severities
name: severities
in: query
style: form
explode: true
schema:
type: array
items:
enum:
- critical
- high
- medium
- low
- unknown
type: string
- description: Only packages with fixable vulnerabilities
name: fixable
in: query
schema:
type: boolean
- description: Get the packages with their resolved CVEs according to the source - subscribed image or discovered package in repo
name: package_source
in: query
schema:
type: string
enum:
- discovered
- subscribed
- description: Filter by SLA status
name: sla_status
in: query
style: form
explode: true
schema:
type: array
items:
enum:
- met
- breached
- active
- not_applicable
type: string
responses:
'200':
description: OK
content:
application/json:
schema:
$ref: '#/components/schemas/ListPackagesPagedResponse'
/v3/packages/{pkg_id}:
get:
security:
- BasicAuth: []
description: Retrieves a packages of from image catalog or the users discovered
tags:
- Package
summary: Get a package by its ID
parameters:
- description: AVR ID
name: pkg_id
in: path
required: true
schema:
type: string
responses:
'200':
description: OK
content:
application/json:
schema:
$ref: '#/components/schemas/ScanPackageResponse'
/v3/packages/{pkg_id}/artifacts/patches:
get:
security:
- BasicAuth: []
description: Retrieves presigned URLs for all patch files available for a specific package
tags:
- Package
summary: Get patch files for a package
parameters:
- description: Package ID
name: pkg_id
in: path
required: true
schema:
type: string
responses:
'200':
description: OK
content:
application/json:
schema:
$ref: '#/components/schemas/PatchFilesResponse'
/v3/packages/{pkg_id}/artifacts/provenance:
get:
security:
- BasicAuth: []
description: Retrieves a presigned URL for the SLSA provenance file of a specific package
tags:
- Package
summary: Get provenance file for a package
parameters:
- description: Package ID
name: pkg_id
in: path
required: true
schema:
type: string
responses:
'200':
description: OK
content:
application/json:
schema:
$ref: '#/components/schemas/PackageProvenanceFileResponse'
components:
schemas:
Cursor:
type: object
properties:
after:
type: string
before:
type: string
limit:
type: integer
total_count:
description: TotalCount is the number of rows matching the list filters for endpoints that populate it (e.g. security findings list). Response-only.
type: integer
v3.SLAStatus:
type: string
enum:
- met
- active
- breached
- not_applicable
x-enum-varnames:
- SLAStatusMet
- SLAStatusActive
- SLAStatusBreached
- SLAStatusNotApplicable
ListPackagesPagedResponse:
type: object
properties:
cursor:
$ref: '#/components/schemas/Cursor'
data:
type: array
items:
$ref: '#/components/schemas/ScanPackageResponse'
v3.CVESeverity:
type: string
enum:
- critical
- high
- medium
- low
- unknown
x-enum-varnames:
- CveSeverityCritical
- CveSeverityHigh
- CveSeverityMedium
- CveSeverityLow
- CveSeverityUnknown
ScanPackageResponse:
type: object
properties:
arch:
$ref: '#/components/schemas/Arch'
available_root_fixable_cve_ids:
description: 'CVE IDs newly fixed by upgrading to AvailableRootVersion. Empty when no
upgrade applies.'
type: array
items:
type: string
available_root_version:
description: Highest applicable Root.io patch version; empty when no upgrade applies.
type: string
avr_scan_id:
type: string
created_at:
type: string
cves:
type: array
items:
$ref: '#/components/schemas/CVEResponse'
ecosystem:
$ref: '#/components/schemas/constants.EcosystemName'
id:
type: string
installation_path:
type: string
is_root_package:
description: Currently using Root.io version
type: boolean
last_pulled_at:
description: Last detected timestamp
type: string
licenses:
type: array
items:
type: string
name:
type: string
os_distro_release:
type: string
package_purl:
type: string
resolved_cves:
description: CVEs fixed by Root.io or user's updates (in PRE/original but not in POST/new)
type: array
items:
$ref: '#/components/schemas/CVEResponse'
root_upgrade_available:
description: Has Root.io upgrade available
type: boolean
src_name:
type: string
updated_at:
type: string
version:
type: string
PatchFilesResponse:
type: object
properties:
patch_files_urls:
type: array
items:
type: string
CVEResponse:
type: object
properties:
avr_scan_id:
type: string
created_at:
type: string
cve_id:
type: string
cve_ticket_id:
type: string
cvss_score:
type: number
cvss_vector:
type: string
description:
type: string
discovered_at:
type: string
fixed_in_version:
type: string
id:
type: string
nvd_link:
type: string
package_id:
type: string
published_at:
type: string
severity:
$ref: '#/components/schemas/v3.CVESeverity'
sla:
$ref: '#/components/schemas/v3.SLAInfo'
title:
type: string
updated_at:
type: string
Arch:
type: string
enum:
- arm64
- amd64
- x86
- aarch64
- arm
- ppc64
- ppc64le
- mips
- mips64
- mips64le
- mipsle
x-enum-varnames:
- ArchARM64
- ArchAmd64
- ArchX86
- ArchAARCH64
- ArchARM
- ArchPPC64
- ArchPPC
- ArchMIPS
- ArchMIPS64
- ArchMIPS64LE
- ArchMIPSLE
constants.EcosystemName:
type: string
enum:
- debian
- ubuntu
- alpine
- amazon
- redhat
- rocky
- distroless
- fedora
- opensuse-leap
- pypi
- npm
- maven
- gobinary
- nuget
- composer
- binary
x-enum-varnames:
- EcosystemNameDebian
- EcosystemNameUbuntu
- EcosystemNameAlpine
- EcosystemNameAmazon
- EcosystemNameRedhat
- EcosystemNameRocky
- EcosystemNameDistroless
- EcosystemNameFedora
- EcosystemNameOpenSUSELeap
- EcosystemNamePypi
- EcosystemNameNpm
- EcosystemNameMaven
- EcosystemNameGoBinary
- EcosystemNameNuget
- EcosystemNameComposer
- EcosystemNameBinary
v3.SLAInfo:
type: object
properties:
cve_id:
type: string
organization_id:
type: string
patch_found_at:
type: string
root_patch_provided_at:
type: string
severity:
$ref: '#/components/schemas/v3.CVESeverity'
sla_deadline_at:
type: string
sla_started_at:
type: string
sla_status:
$ref: '#/components/schemas/v3.SLAStatus'
PackageProvenanceFileResponse:
type: object
properties:
provenance_file_url:
type: string
securitySchemes:
BasicAuth:
type: http
scheme: basic