Root (fka Slim.ai) Subscriptions API

The Subscriptions API from Root (fka Slim.ai) — 2 operation(s) for subscriptions.

Operations 4

GET /v3/subscriptions List subscriptions
POST /v3/subscriptions Create subscriptions (bulk)
DELETE /v3/subscriptions Delete subscriptions (bulk)
GET /v3/subscriptions/{subscriptionID} Get subscription

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/root-fka-slimai-subscriptions-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

root-fka-slimai-subscriptions-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  description: This is the API documentation for Root.io.
  title: Root.io Accounts Subscriptions API
  termsOfService: https://www.root.io/terms-of-service
  contact: {}
  version: '1.0'
servers:
- url: https://api.root.io
tags:
- name: Subscriptions
paths:
  /v3/subscriptions:
    get:
      security:
      - BasicAuth: []
      description: Lists all subscriptions for the organization with pagination and preloaded tag/image data
      tags:
      - Subscriptions
      summary: List subscriptions
      parameters:
      - description: Cursor for next page
        name: after
        in: query
        schema:
          type: string
      - description: Cursor for previous page
        name: before
        in: query
        schema:
          type: string
      - description: Page size (default 100, max 1000)
        name: limit
        in: query
        schema:
          type: integer
      - description: Ordering (e.g., 'created_at:desc')
        name: order
        in: query
        style: form
        explode: true
        schema:
          type: array
          items:
            type: string
      - description: Filter by root registry tag IDs
        name: tag_id
        in: query
        style: form
        explode: true
        schema:
          type: array
          items:
            type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ListSubscriptionsResponse'
    post:
      security:
      - BasicAuth: []
      description: Creates multiple subscriptions from a list of tag IDs. The infrastructure supports bulk operations out of the box.
      tags:
      - Subscriptions
      summary: Create subscriptions (bulk)
      responses:
        '201':
          description: Created
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/SubscriptionResponse'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateSubscriptionsRequest'
        description: Subscriptions to create
        required: true
    delete:
      security:
      - BasicAuth: []
      description: Deletes multiple subscriptions by their IDs. The infrastructure supports bulk operations out of the box.
      tags:
      - Subscriptions
      summary: Delete subscriptions (bulk)
      responses:
        '200':
          description: Deleted subscriptions
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/SubscriptionResponse'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/DeleteSubscriptionsRequest'
        description: Subscriptions to delete
        required: true
  /v3/subscriptions/{subscriptionID}:
    get:
      security:
      - BasicAuth: []
      description: Gets a specific subscription by ID with preloaded tag and image data
      tags:
      - Subscriptions
      summary: Get subscription
      parameters:
      - description: Subscription ID
        name: subscriptionID
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SubscriptionResponse'
components:
  schemas:
    AVRScanResponse:
      type: object
      properties:
        arch:
          $ref: '#/components/schemas/Arch'
        created_at:
          type: string
        ecosystem:
          $ref: '#/components/schemas/constants.EcosystemName'
        id:
          type: string
        image_digest:
          type: string
        os_distro_release:
          type: string
        sbom_key:
          type: string
        status:
          $ref: '#/components/schemas/v3.AVRScanStatus'
        target_image:
          type: string
        updated_at:
          type: string
        vulnerability_counts:
          $ref: '#/components/schemas/v3.VulnerabilityCounts'
    v3.AVRStatus:
      type: string
      enum:
      - pulling_image
      - scanning
      - building
      - rescanning
      - auditing
      - completed
      - failed
      x-enum-varnames:
      - AVRStatusPullingImage
      - AVRStatusScanning
      - AVRStatusBuilding
      - AVRStatusRescanning
      - AVRStatusAuditing
      - AVRStatusCompleted
      - AVRStatusFailed
    v3.PackageChange:
      type: object
      properties:
        new_version:
          type: string
        old_version:
          type: string
    Cursor:
      type: object
      properties:
        after:
          type: string
        before:
          type: string
        limit:
          type: integer
        total_count:
          description: TotalCount is the number of rows matching the list filters for endpoints that populate it (e.g. security findings list). Response-only.
          type: integer
    v3.VulnerabilityCountsBreakdown:
      type: object
      properties:
        critical:
          type: integer
        high:
          type: integer
        low:
          type: integer
        medium:
          type: integer
        unknown:
          type: integer
    DeleteSubscriptionsRequest:
      type: object
      required:
      - subscription_ids
      properties:
        subscription_ids:
          type: array
          minItems: 1
          items:
            type: string
    OriginalScanResponse:
      type: object
      properties:
        id:
          type: string
        scanned_at:
          type: string
        status:
          $ref: '#/components/schemas/v3.AVRScanStatus'
        target_image:
          type: string
        vulnerability_counts:
          $ref: '#/components/schemas/v3.VulnerabilityCounts'
    TagResponse:
      type: object
      properties:
        access_tier:
          $ref: '#/components/schemas/AccessTier'
        arch:
          $ref: '#/components/schemas/Arch'
        artifacts_available:
          type: boolean
        avr:
          $ref: '#/components/schemas/AVRWithScansResponse'
        created_at:
          type: string
        id:
          type: string
        last_avr_id:
          type: string
        original_scan:
          $ref: '#/components/schemas/OriginalScanResponse'
        root_image_tag:
          type: string
        root_registry_image_repo:
          type: string
        updated_at:
          type: string
    AccessTier:
      type: string
      enum:
      - none
      - free
      - pro
      - fips
      x-enum-varnames:
      - AccessTierNone
      - AccessTierFree
      - AccessTierPro
      - AccessTierFIPS
    v3.AVRScanStatus:
      type: string
      enum:
      - scanning
      - completed
      - failed
      x-enum-varnames:
      - AVRScanStatusScanning
      - AVRScanStatusCompleted
      - AVRScanStatusFailed
    v3.RemediationDetails:
      type: object
      properties:
        deleted_packages:
          type: object
          additionalProperties:
            type: string
        is_truncated:
          type: boolean
        new_packages:
          type: object
          additionalProperties:
            type: string
        root_patched_packages:
          type: object
          additionalProperties:
            $ref: '#/components/schemas/v3.PackageChange'
        upgraded_packages:
          type: object
          additionalProperties:
            $ref: '#/components/schemas/v3.PackageChange'
    Arch:
      type: string
      enum:
      - arm64
      - amd64
      - x86
      - aarch64
      - arm
      - ppc64
      - ppc64le
      - mips
      - mips64
      - mips64le
      - mipsle
      x-enum-varnames:
      - ArchARM64
      - ArchAmd64
      - ArchX86
      - ArchAARCH64
      - ArchARM
      - ArchPPC64
      - ArchPPC
      - ArchMIPS
      - ArchMIPS64
      - ArchMIPS64LE
      - ArchMIPSLE
    constants.EcosystemName:
      type: string
      enum:
      - debian
      - ubuntu
      - alpine
      - amazon
      - redhat
      - rocky
      - distroless
      - fedora
      - opensuse-leap
      - pypi
      - npm
      - maven
      - gobinary
      - nuget
      - composer
      - binary
      x-enum-varnames:
      - EcosystemNameDebian
      - EcosystemNameUbuntu
      - EcosystemNameAlpine
      - EcosystemNameAmazon
      - EcosystemNameRedhat
      - EcosystemNameRocky
      - EcosystemNameDistroless
      - EcosystemNameFedora
      - EcosystemNameOpenSUSELeap
      - EcosystemNamePypi
      - EcosystemNameNpm
      - EcosystemNameMaven
      - EcosystemNameGoBinary
      - EcosystemNameNuget
      - EcosystemNameComposer
      - EcosystemNameBinary
    AVRWithScansResponse:
      type: object
      properties:
        created_at:
          type: string
        dockerfile_digest:
          type: string
        dockerfile_key:
          type: string
        id:
          type: string
        post_remediation_scan:
          $ref: '#/components/schemas/AVRScanResponse'
        pre_remediation_scan:
          $ref: '#/components/schemas/AVRScanResponse'
        provenance_key:
          type: string
        remediation_details:
          $ref: '#/components/schemas/v3.RemediationDetails'
        status:
          $ref: '#/components/schemas/v3.AVRStatus'
        target_image:
          type: string
        updated_at:
          type: string
        vex_key:
          type: string
    CreateSubscriptionsRequest:
      type: object
      properties:
        image_tags:
          type: array
          items:
            type: string
        tag_ids:
          type: array
          items:
            type: string
    ListSubscriptionsResponse:
      type: object
      properties:
        cursor:
          $ref: '#/components/schemas/Cursor'
        data:
          type: array
          items:
            $ref: '#/components/schemas/SubscriptionResponse'
    SubscriptionResponse:
      type: object
      properties:
        created_at:
          type: string
        id:
          type: string
        organization_id:
          type: string
        root_registry_tag_id:
          description: Which tag subscribed to
          type: string
        tag:
          $ref: '#/components/schemas/TagResponse'
        updated_at:
          type: string
    v3.VulnerabilityCounts:
      type: object
      properties:
        app_level:
          description: App-level vulnerability counts (nil/omitted for old records)
          allOf:
          - $ref: '#/components/schemas/v3.VulnerabilityCountsBreakdown'
        critical:
          description: OS-level vulnerability counts (top-level for backward compatibility)
          type: integer
        high:
          type: integer
        low:
          type: integer
        medium:
          type: integer
        unknown:
          type: integer
  securitySchemes:
    BasicAuth:
      type: http
      scheme: basic