Root (fka Slim.ai) website screenshot

Root (fka Slim.ai)

Root (formerly Slim.ai) is a container and dependency security company backed by Insight Partners. Its "secure supply" platform delivers end-to-end, autonomous vulnerability remediation for container images and application packages: a fleet of AI agents (Agentic Vulnerability Remediation, AVR) researches, patches, tests, and ships Root Patches within minutes of CVE publication, without base-image changes or forced version upgrades. Root operates the Root Image Catalog (cr.root.io), Library Catalog, and OS-package registry (pkg.root.io), and exposes a REST API (api.root.io) for querying patch status, security findings, subscriptions, and pulling SBOM, VEX, and provenance artifacts, plus Standard-Webhooks notifications and a first-party CLI (rootio_patcher).

Root (fka Slim.ai) publishes 20 APIs on the APIs.io network, including Accounts API, API Keys API, Authentication API, and 17 more. Tagged areas include Company, Security, Vulnerability Management, Container Security, and DevSecOps.

The Root (fka Slim.ai) catalog on APIs.io includes 1 event-driven AsyncAPI specification.

Root (fka Slim.ai)’s developer surface includes authentication, changelog, CLI, documentation, getting-started guide, support, engineering blog, and 24 more developer resources.

46.6/100 developing ▬ flat Agent 28/100 agent aware saas Full breakdown ↓
scored 2026-09-08 · rubric v0.20.0
1 APIs
CompanySecurityVulnerability ManagementContainer SecurityDevSecOpsSoftware Supply ChainCVESBOMOpen-SourcePatching

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-09-08 · rubric v0.20.0
Create-or-Update Ergonomics applies to this provider. This API accepts writes, so it carries 10 points of the composite. It is scored from the published contracts themselves: whether a caller can create-or-update in one call, whether the write accepts a key the caller already holds, and whether the response says which branch ran. Without that, every write needs a search-and-branch in front of it, and the first time that check is skipped a duplicate record is created. Scored against the observed mean rather than raw — a provider at the catalog average is unchanged by this facet, not penalised by it.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from github.com/api-evangelist/root-fka-slimai: open an issue to ask a question, or submit a pull request to add artifacts. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

APIs 20

Individual APIs this provider publishes, each with its own machine-readable definition.

Root (fka Slim.ai) Accounts API

The Accounts API from Root (fka Slim.ai) — 3 operation(s) for accounts.

Root (fka Slim.ai) API Keys API

The API Keys API from Root (fka Slim.ai) — 2 operation(s) for api keys.

Root (fka Slim.ai) Authentication API

The Authentication API from Root (fka Slim.ai) — 1 operation(s) for authentication.

Root (fka Slim.ai) AVR API

The AVR API from Root (fka Slim.ai) — 6 operation(s) for avr.

Root (fka Slim.ai) Billing API

The Billing API from Root (fka Slim.ai) — 1 operation(s) for billing.

Root (fka Slim.ai) Core - Discovered Packages V3 API

The Core - Discovered Packages V3 API from Root (fka Slim.ai) — 1 operation(s) for core - discovered packages v3.

Root (fka Slim.ai) CveFeed API

The CveFeed API from Root (fka Slim.ai) — 1 operation(s) for cvefeed.

Root (fka Slim.ai) Discovery API

The Discovery API from Root (fka Slim.ai) — 2 operation(s) for discovery.

Root (fka Slim.ai) Invitations API

The Invitations API from Root (fka Slim.ai) — 3 operation(s) for invitations.

Root (fka Slim.ai) Notifications API

The Notifications API from Root (fka Slim.ai) — 4 operation(s) for notifications.

Root (fka Slim.ai) Organizations API

The Organizations API from Root (fka Slim.ai) — 1 operation(s) for organizations.

Root (fka Slim.ai) OSVFeed API

The OSVFeed API from Root (fka Slim.ai) — 3 operation(s) for osvfeed.

Root (fka Slim.ai) Package API

The Package API from Root (fka Slim.ai) — 4 operation(s) for package.

Root (fka Slim.ai) Patches API

The Patches API from Root (fka Slim.ai) — 3 operation(s) for patches.

Root (fka Slim.ai) PatchFeed API

The PatchFeed API from Root (fka Slim.ai) — 1 operation(s) for patchfeed.

Root (fka Slim.ai) Remediation API

The Remediation API from Root (fka Slim.ai) — 10 operation(s) for remediation.

Root (fka Slim.ai) Security Findings API

The Security Findings API from Root (fka Slim.ai) — 4 operation(s) for security findings.

Root (fka Slim.ai) Subscriptions API

The Subscriptions API from Root (fka Slim.ai) — 2 operation(s) for subscriptions.

Root (fka Slim.ai) System Matrix API

The System Matrix API from Root (fka Slim.ai) — 2 operation(s) for system matrix.

Root (fka Slim.ai) Webhooks API

The Webhooks API from Root (fka Slim.ai) — 3 operation(s) for webhooks.

Scroll for all 20

Open Collections 21

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

API Collection

OPEN COLLECTION

Root.io Accounts API

OPEN COLLECTION

Root.io Accounts AVR API

OPEN COLLECTION

Scroll for all 21

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Root Fka Slimai Authentication

http · 2 schemes

SECURITY

Root Fka Slimai Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Root Fka Slimai Vulnerability Disclosure

contact published

SECURITY

Root Fka Slimai Trust Center

SOC 2 Type II, Cyber Essentials, SLSA, FIPS 140-3, STIG

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Root Fka Slimai Agentic Access

69 operations · 31 acting

69 operations · 31 acting

AGENTIC

Resources

Get Started 3

Portal, sign-up, and the first successful call

Documentation 1

Reference material describing how the API behaves

Agent Surfaces 4

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 6

Pagination, idempotency, versioning, errors, and events

Build 3

SDKs, sample code, and the tooling you integrate with

Access & Security 6

Authentication, authorization, and security posture

Operate 3

Status, limits, changes, and where to get help

Commercial 2

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Other 1

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: root-fka-slimai
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: true
  label: Hosted service · you call their endpoint
  confidence: high
  source:
  - openapi
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source:
  - authentication
  - security
  - url: https://www.root.io/
    status: 301
    note: declared website redirects to https://www.aikido.dev/cloud/hardened-images — a different registrable domain (root.io
      -> aikido.dev), possible rename or acquisition (probed 2026-09-03, roadmap#169)
  generated: '2026-09-03'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/root-fka-slimai.png
name: Root (fka Slim.ai)
description: 'Root (formerly Slim.ai) is a container and dependency security company backed by Insight Partners. Its "secure
  supply" platform delivers end-to-end, autonomous vulnerability remediation for container images and application packages:
  a fleet of AI agents (Agentic Vulnerability Remediation, AVR) researches, patches, tests, and ships Root Patches within
  minutes of CVE publication, without base-image changes or forced version upgrades. Root operates the Root Image Catalog
  (cr.root.io), Library Catalog, and OS-package registry (pkg.root.io), and exposes a REST API (api.root.io) for querying
  patch status, security findings, subscriptions, and pulling SBOM, VEX, and provenance artifacts, plus Standard-Webhooks
  notifications and a first-party CLI (rootio_patcher).'
url: https://raw.githubusercontent.com/api-evangelist/root-fka-slimai/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- insight-partners
x-tier: profile
x-tier-reason: enriched
specificationVersion: '0.23'
x-enrichment:
  date: '2026-07-21'
  status: enriched
  artifacts_added: 21
  pass: local-v1
created: '2026-07-17'
modified: '2026-07-21'
tags:
- Company
- Security
- Vulnerability Management
- Container Security
- DevSecOps
- Software Supply Chain
- CVE
- SBOM
- Open-Source
- Patching
tags_raw:
- Company
- Security
- Vulnerability Management
- Container Security
- DevSecOps
- Software Supply Chain
- CVE
- SBOM
- Open Source
- Patching
apis:
- aid: root-fka-slimai:root-fka-slimai-accounts-api
  name: Root (fka Slim.ai) Accounts API
  description: The Accounts API from Root (fka Slim.ai) — 3 operation(s) for accounts.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - Account
  tags_raw:
  - Accounts
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-accounts-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-api-keys-api
  name: Root (fka Slim.ai) API Keys API
  description: The API Keys API from Root (fka Slim.ai) — 2 operation(s) for api keys.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - APIKeys
  tags_raw:
  - API Keys
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-api-keys-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-authentication-api
  name: Root (fka Slim.ai) Authentication API
  description: The Authentication API from Root (fka Slim.ai) — 1 operation(s) for authentication.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - Authentication
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-authentication-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-avr-api
  name: Root (fka Slim.ai) AVR API
  description: The AVR API from Root (fka Slim.ai) — 6 operation(s) for avr.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - AVR
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-avr-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-billing-api
  name: Root (fka Slim.ai) Billing API
  description: The Billing API from Root (fka Slim.ai) — 1 operation(s) for billing.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - Billing
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-billing-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-core-discovered-packages-v3-api
  name: Root (fka Slim.ai) Core - Discovered Packages V3 API
  description: The Core - Discovered Packages V3 API from Root (fka Slim.ai) — 1 operation(s) for core - discovered packages
    v3.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - Core - Discovered Packages V3
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-core-discovered-packages-v3-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-cvefeed-api
  name: Root (fka Slim.ai) CveFeed API
  description: The CveFeed API from Root (fka Slim.ai) — 1 operation(s) for cvefeed.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - CveFeed
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-cvefeed-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-discovery-api
  name: Root (fka Slim.ai) Discovery API
  description: The Discovery API from Root (fka Slim.ai) — 2 operation(s) for discovery.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - Discovery
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-discovery-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-invitations-api
  name: Root (fka Slim.ai) Invitations API
  description: The Invitations API from Root (fka Slim.ai) — 3 operation(s) for invitations.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - Invitations
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-invitations-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-notifications-api
  name: Root (fka Slim.ai) Notifications API
  description: The Notifications API from Root (fka Slim.ai) — 4 operation(s) for notifications.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - Notification
  tags_raw:
  - Notifications
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-notifications-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-organizations-api
  name: Root (fka Slim.ai) Organizations API
  description: The Organizations API from Root (fka Slim.ai) — 1 operation(s) for organizations.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - Organization
  tags_raw:
  - Organizations
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-organizations-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-osvfeed-api
  name: Root (fka Slim.ai) OSVFeed API
  description: The OSVFeed API from Root (fka Slim.ai) — 3 operation(s) for osvfeed.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - OSVFeed
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-osvfeed-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-package-api
  name: Root (fka Slim.ai) Package API
  description: The Package API from Root (fka Slim.ai) — 4 operation(s) for package.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - Package
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-package-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-patches-api
  name: Root (fka Slim.ai) Patches API
  description: The Patches API from Root (fka Slim.ai) — 3 operation(s) for patches.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - Patches
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-patches-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-patchfeed-api
  name: Root (fka Slim.ai) PatchFeed API
  description: The PatchFeed API from Root (fka Slim.ai) — 1 operation(s) for patchfeed.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - PatchFeed
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-patchfeed-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-remediation-api
  name: Root (fka Slim.ai) Remediation API
  description: The Remediation API from Root (fka Slim.ai) — 10 operation(s) for remediation.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - Remediation
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-remediation-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-security-findings-api
  name: Root (fka Slim.ai) Security Findings API
  description: The Security Findings API from Root (fka Slim.ai) — 4 operation(s) for security findings.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - Security Findings
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-security-findings-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-subscriptions-api
  name: Root (fka Slim.ai) Subscriptions API
  description: The Subscriptions API from Root (fka Slim.ai) — 2 operation(s) for subscriptions.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - Subscription
  tags_raw:
  - Subscriptions
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-subscriptions-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-system-matrix-api
  name: Root (fka Slim.ai) System Matrix API
  description: The System Matrix API from Root (fka Slim.ai) — 2 operation(s) for system matrix.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - System Matrix
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-system-matrix-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
- aid: root-fka-slimai:root-fka-slimai-webhooks-api
  name: Root (fka Slim.ai) Webhooks API
  description: The Webhooks API from Root (fka Slim.ai) — 3 operation(s) for webhooks.
  humanURL: https://docs.root.io/reference/api
  baseURL: https://api.root.io
  tags:
  - Webhook
  tags_raw:
  - Webhooks
  properties:
  - type: OpenAPI
    url: openapi/root-fka-slimai-webhooks-api-openapi.yml
  - type: APIReference
    url: https://api.root.io/rapidoc/index.html
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Overlay
  url: overlays/root-fka-slimai-openapi-overlay.yaml
- type: AgenticAccess
  url: agentic-access/root-fka-slimai-agentic-access.yml
- type: DomainSecurity
  url: security/root-fka-slimai-domain-security.yml
- type: Authentication
  url: authentication/root-fka-slimai-authentication.yml
- type: Packages
  url: packages/root-fka-slimai-packages.yml
- type: X-MCPServerCandidate
  url: mcp/root-fka-slimai-mcp.yml
  note: 'Renamed from MCPServer 2026-09-03 (roadmap#247): the manifest self-describes as status: candidate — a tool list derived
    from the published API contracts, not an existing server. The scorer already read the manifest and reported mcp_server
    correctly; the MCPServer type was crediting the artifact-type surfaces with a server that does not exist.'
- type: LLMsTxt
  url: llms/root-fka-slimai-llms.txt
- type: Conformance
  url: conformance/root-fka-slimai-conformance.yml
- type: Compliance
  url: https://docs.root.io/compliance/certifications
- type: ErrorCatalog
  url: errors/root-fka-slimai-problem-types.yml
- type: Lifecycle
  url: lifecycle/root-fka-slimai-lifecycle.yml
- type: Conventions
  url: conventions/root-fka-slimai-conventions.yml
- type: RateLimits
  url: conventions/root-fka-slimai-conventions.yml
- type: ChangeLog
  url: changelog/root-fka-slimai-changelog.yml
- type: CLI
  url: cli/root-fka-slimai-cli.yml
- type: DataModel
  url: data-model/root-fka-slimai-data-model.yml
- type: Webhooks
  url: asyncapi/root-fka-slimai-webhooks.yml
- type: AgentSkill
  url: skills/_index.yml
- type: VulnerabilityDisclosure
  url: security/root-fka-slimai-vulnerability-disclosure.yml
- type: Security
  url: https://docs.root.io/compliance/security-posture
- type: TrustCenter
  url: security/root-fka-slimai-trust-center.yml
- type: Documentation
  url: https://docs.root.io/
- type: DeveloperPortal
  url: https://app.root.io/
- type: GettingStarted
  url: https://docs.root.io/quickstart
- type: Support
  url: https://start-chat.com/slack/Root/ghdO0t
- type: Blog
  url: https://www.root.io/blog
- type: GitHubOrganization
  url: https://github.com/rootio-avr
- type: SignUp
  url: https://app.root.io/
- type: TermsOfService
  url: https://www.root.io/terms-of-service
- type: PrivacyPolicy
  url: https://www.root.io/privacy-policy
- type: Website
  url: https://www.root.io/

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this
  • find_providersBrowse and filter every provider in the catalog.
  • get_provider_artifactsEvery artifact this provider publishes, grouped by type.
  • get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
  • get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
  • get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
  • get_provider_ratingPRO — composite, band, trend and facet scores.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This provider
curl "https://apis.io/api/v1/providers/root-fka-slimai"
All providers
curl "https://apis.io/api/v1/providers?limit=25"
Every operation they expose
curl "https://apis.io/api/v1/providers/root-fka-slimai/operations?limit=25"
How their score was established
curl "https://apis.io/api/v1/providers/root-fka-slimai/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.