Root (fka Slim.ai) Remediation API

The Remediation API from Root (fka Slim.ai) — 10 operation(s) for remediation.

Operations 10

POST /v3/analyze/apk Get APK package remediation recommendations
POST /v3/analyze/apt Get APT package remediation recommendations
POST /v3/analyze/composer Get Composer package remediation recommendations
POST /v3/analyze/golang Get Go module remediation recommendations
POST /v3/analyze/maven Get Maven package remediation recommendations
POST /v3/analyze/npm Get NPM package remediation recommendations
POST /v3/analyze/nuget Get NuGet package remediation recommendations
POST /v3/analyze/pypi Get PyPI package remediation recommendations
POST /v3/analyze/yum Get YUM/DNF package remediation recommendations
POST /v3/remediate/pypi Get PyPI package remediation recommendations

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/root-fka-slimai-remediation-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

root-fka-slimai-remediation-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  description: This is the API documentation for Root.io.
  title: Root.io Accounts Remediation API
  termsOfService: https://www.root.io/terms-of-service
  contact: {}
  version: '1.0'
servers:
- url: https://api.root.io
tags:
- name: Remediation
paths:
  /v3/analyze/apk:
    post:
      description: Accepts a list of installed APK/Alpine packages with explicit ecosystem and distro version, returns Root.io patched versions with aliased names and official repo upgrades
      tags:
      - Remediation
      summary: Get APK package remediation recommendations
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/analyze.AnalyzeOsPackagesResponse'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                type: string
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/analyze.AnalyzeOsPackagesRequest'
        description: Package list with OS ecosystem and distro version
        required: true
  /v3/analyze/apt:
    post:
      description: Accepts a list of installed APT/Debian/Ubuntu packages with explicit ecosystem and distro version, returns Root.io patched versions with aliased names and official repo upgrades
      tags:
      - Remediation
      summary: Get APT package remediation recommendations
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/analyze.AnalyzeOsPackagesResponse'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                type: string
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/analyze.AnalyzeOsPackagesRequest'
        description: Package list with OS ecosystem and distro version
        required: true
  /v3/analyze/composer:
    post:
      description: Accepts a list of installed Composer packages and returns Root.io patched versions with aliased names
      tags:
      - Remediation
      summary: Get Composer package remediation recommendations
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ComposerAnalyzePackagesResponse'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                type: string
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ComposerAnalyzePackagesRequest'
        description: Package list
        required: true
  /v3/analyze/golang:
    post:
      description: Accepts a list of installed Go modules and returns Root.io patched versions with aliased module paths
      tags:
      - Remediation
      summary: Get Go module remediation recommendations
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GolangAnalyzePackagesResponse'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                type: string
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GolangAnalyzePackagesRequest'
        description: Module list
        required: true
  /v3/analyze/maven:
    post:
      description: Accepts a list of installed Maven packages and returns Root.io patched versions with aliased names
      tags:
      - Remediation
      summary: Get Maven package remediation recommendations
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MavenAnalyzePackagesResponse'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                type: string
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/MavenAnalyzePackagesRequest'
        description: Package list
        required: true
  /v3/analyze/npm:
    post:
      description: Accepts a list of installed NPM packages and returns Root.io patched versions with aliased names
      tags:
      - Remediation
      summary: Get NPM package remediation recommendations
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NpmAnalyzePackagesResponse'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                type: string
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/NpmAnalyzePackagesRequest'
        description: Package list
        required: true
  /v3/analyze/nuget:
    post:
      description: Accepts a list of installed NuGet packages and returns Root.io patched versions with aliased names
      tags:
      - Remediation
      summary: Get NuGet package remediation recommendations
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NugetAnalyzePackagesResponse'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                type: string
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/NugetAnalyzePackagesRequest'
        description: Package list
        required: true
  /v3/analyze/pypi:
    post:
      description: Accepts a list of installed packages and returns Root.io patched versions with aliased names
      tags:
      - Remediation
      summary: Get PyPI package remediation recommendations
      deprecated: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PyPiAnalyzePackagesResponse'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                type: string
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PyPiAnalyzePackagesRequest'
        description: Package list
        required: true
  /v3/analyze/yum:
    post:
      description: Accepts a list of installed YUM/DNF packages (Amazon Linux, RHEL, Rocky, Fedora) with explicit ecosystem and distro version, returns Root.io patched versions with aliased names and official repo upgrades
      tags:
      - Remediation
      summary: Get YUM/DNF package remediation recommendations
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/analyze.AnalyzeOsPackagesResponse'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                type: string
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/analyze.AnalyzeOsPackagesRequest'
        description: Package list with OS ecosystem and distro version
        required: true
  /v3/remediate/pypi:
    post:
      description: Accepts a list of installed packages and returns Root.io patched versions with aliased names
      tags:
      - Remediation
      summary: Get PyPI package remediation recommendations
      deprecated: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PyPiAnalyzePackagesResponse'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                type: string
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PyPiAnalyzePackagesRequest'
        description: Package list
        required: true
components:
  schemas:
    GolangAnalyzePackagesRequest:
      type: object
      required:
      - packages
      properties:
        ignore:
          description: 'Ignore is an optional list of packages to exclude from patch recommendations

            (e.g. packages already on a Root.io build). Ignored packages only appear in

            the result if a strictly newer build is available.'
          type: array
          items:
            $ref: '#/components/schemas/analyze.PackageInfo'
        packages:
          type: array
          minItems: 1
          items:
            $ref: '#/components/schemas/analyze.PackageInfo'
    analyze.AnalyzeOsPackagesRequest:
      type: object
      required:
      - ecosystem
      - os_distro_version
      - packages
      properties:
        ecosystem:
          type: string
        os_distro_version:
          type: string
        packages:
          type: array
          minItems: 1
          items:
            $ref: '#/components/schemas/analyze.PackageInfo'
    analyze.SkippedPackage:
      type: object
      properties:
        package_name:
          type: string
        version:
          type: string
    NpmAnalyzePackagesRequest:
      type: object
      required:
      - packages
      properties:
        ignore:
          description: 'Ignore is an optional list of packages to exclude from patch recommendations

            (e.g. packages already on a Root.io build). Ignored packages only appear in

            the result if a strictly newer build is available.'
          type: array
          items:
            $ref: '#/components/schemas/analyze.PackageInfo'
        packages:
          type: array
          minItems: 1
          items:
            $ref: '#/components/schemas/analyze.PackageInfo'
    NugetAnalyzePackagesResponse:
      type: object
      properties:
        patches:
          type: array
          items:
            $ref: '#/components/schemas/analyze.PackagePatch'
        skipped:
          type: array
          items:
            $ref: '#/components/schemas/analyze.SkippedPackage'
    NpmAnalyzePackagesResponse:
      type: object
      properties:
        patches:
          type: array
          items:
            $ref: '#/components/schemas/analyze.PackagePatch'
        skipped:
          type: array
          items:
            $ref: '#/components/schemas/analyze.SkippedPackage'
    GolangAnalyzePackagesResponse:
      type: object
      properties:
        patches:
          type: array
          items:
            $ref: '#/components/schemas/analyze.PackagePatch'
        skipped:
          type: array
          items:
            $ref: '#/components/schemas/analyze.SkippedPackage'
    MavenAnalyzePackagesRequest:
      type: object
      required:
      - packages
      properties:
        ignore:
          description: 'Ignore is an optional list of packages to exclude from patch recommendations

            (e.g. packages already on a Root.io build). Ignored packages only appear in

            the result if a strictly newer build is available.'
          type: array
          items:
            $ref: '#/components/schemas/analyze.PackageInfo'
        packages:
          type: array
          minItems: 1
          items:
            $ref: '#/components/schemas/analyze.PackageInfo'
    PyPiAnalyzePackagesRequest:
      type: object
      required:
      - packages
      properties:
        ignore:
          description: 'Ignore is an optional list of packages to exclude from patch recommendations

            (e.g. packages already on a Root.io build). Ignored packages only appear in

            the result if a strictly newer build is available.'
          type: array
          items:
            $ref: '#/components/schemas/analyze.PackageInfo'
        packages:
          type: array
          minItems: 1
          items:
            $ref: '#/components/schemas/analyze.PackageInfo'
    analyze.PackageInfo:
      type: object
      required:
      - name
      - version
      properties:
        embedded_in:
          description: EmbeddedIn is non-nil when this package is vendored inside another (PyPI).
          allOf:
          - $ref: '#/components/schemas/EmbeddedRef'
        name:
          type: string
        version:
          type: string
    analyze.UpgradeableOsPackage:
      type: object
      properties:
        current_version:
          type: string
        cve_ids:
          type: array
          items:
            type: string
        package_name:
          type: string
        upgrade_version:
          type: string
    MavenAnalyzePackagesResponse:
      type: object
      properties:
        patches:
          type: array
          items:
            $ref: '#/components/schemas/analyze.PackagePatch'
        skipped:
          type: array
          items:
            $ref: '#/components/schemas/analyze.SkippedPackage'
    PyPiAnalyzePackagesResponse:
      type: object
      properties:
        patches:
          type: array
          items:
            $ref: '#/components/schemas/analyze.PackagePatch'
        skipped:
          type: array
          items:
            $ref: '#/components/schemas/analyze.SkippedPackage'
    ComposerAnalyzePackagesRequest:
      type: object
      required:
      - packages
      properties:
        ignore:
          description: 'Ignore is an optional list of packages to exclude from patch recommendations

            (e.g. packages already on a Root.io build). Ignored packages only appear in

            the result if a strictly newer build is available.'
          type: array
          items:
            $ref: '#/components/schemas/analyze.PackageInfo'
        packages:
          type: array
          minItems: 1
          items:
            $ref: '#/components/schemas/analyze.PackageInfo'
    analyze.AnalyzeOsPackagesResponse:
      type: object
      properties:
        patches:
          type: array
          items:
            $ref: '#/components/schemas/analyze.PackagePatch'
        skipped:
          type: array
          items:
            $ref: '#/components/schemas/analyze.SkippedPackage'
        upgradeable:
          type: array
          items:
            $ref: '#/components/schemas/analyze.UpgradeableOsPackage'
    analyze.PatchInfo:
      type: object
      properties:
        name:
          type: string
        version:
          type: string
    NugetAnalyzePackagesRequest:
      type: object
      required:
      - packages
      properties:
        ignore:
          description: 'Ignore is an optional list of packages to exclude from patch recommendations

            (e.g. packages already on a Root.io build). Ignored packages only appear in

            the result if a strictly newer build is available.'
          type: array
          items:
            $ref: '#/components/schemas/analyze.PackageInfo'
        packages:
          type: array
          minItems: 1
          items:
            $ref: '#/components/schemas/analyze.PackageInfo'
    EmbeddedRef:
      type: object
      properties:
        name:
          description: parent name, e.g. "setuptools"
          type: string
        path:
          description: Path locates the inner *.dist-info; absolute on scans, relative on audit rows.
          type: string
        version:
          description: parent version, e.g. "65.5.0"
          type: string
    ComposerAnalyzePackagesResponse:
      type: object
      properties:
        patches:
          type: array
          items:
            $ref: '#/components/schemas/analyze.PackagePatch'
        skipped:
          type: array
          items:
            $ref: '#/components/schemas/analyze.SkippedPackage'
    analyze.PackagePatch:
      type: object
      properties:
        cve_ids:
          type: array
          items:
            type: string
        embedded_via:
          description: EmbeddedVia is non-nil when the fix ships via a parent vendor bump.
          allOf:
          - $ref: '#/components/schemas/EmbeddedRef'
        package_name:
          type: string
        patch:
          $ref: '#/components/schemas/analyze.PatchInfo'
        patch_alias:
          $ref: '#/components/schemas/analyze.PatchInfo'
        version:
          type: string
  securitySchemes:
    BasicAuth:
      type: http
      scheme: basic