SecurityScorecard · Schema
ActionPlanList
CompanyEnterpriseCybersecuritySecurity RatingsThird-Party Risk ManagementRisk ManagementAttack SurfaceCompliance
Properties
| Name | Type | Description |
|---|---|---|
| entries | array | |
| size | integer | The number of records to be returned per page |
| page | integer | The page number to be returned |
JSON Schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://raw.githubusercontent.com/api-evangelist/security-scorecard/main/json-schema/security-scorecard-action-plan-list-schema.json",
"title": "ActionPlanList",
"x-generated": "2026-10-14",
"x-method": "derived",
"x-generator": "derive-json-schema.py",
"x-source": "openapi/security-scorecard-securityscorecard-api-openapi.yml#/components/schemas/ActionPlanList",
"type": "object",
"additionalProperties": false,
"properties": {
"entries": {
"type": "array",
"items": {
"type": "object",
"properties": {
"id": {
"pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
"description": "action plan identifier",
"type": "string"
},
"remediation_version": {
"type": "string"
},
"roles": {
"type": "array",
"items": {
"type": "string"
}
},
"name": {
"type": "string",
"description": "action plan name"
},
"description": {
"type": "string",
"description": "description"
},
"due_date": {
"anyOf": [
{
"format": "date-time",
"type": "string",
"pattern": "^\\d{4}-\\d{2}-\\d{2}[T ]\\d{2}:\\d{2}:\\d{2}\\.{0,1}[0-9]*Z$"
},
{
"type": "string",
"maxLength": 0
}
],
"description": "due date"
},
"scorecard": {
"description": "scorecard identifier",
"type": "string",
"anyOf": [
{
"type": "string",
"description": "primary domain of the company"
},
{
"pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
"description": "Identifier",
"type": "string"
}
]
},
"guests": {
"type": "array",
"items": {
"type": "string"
},
"description": "list of emails of guest users"
},
"editors": {
"type": "array",
"items": {
"type": "string"
},
"description": "list of emails of editors"
},
"created_by": {
"type": "string",
"description": "user who created the object"
},
"created_at": {
"format": "date-time",
"type": "string",
"pattern": "^\\d{4}-\\d{2}-\\d{2}[T ]\\d{2}:\\d{2}:\\d{2}\\.{0,1}[0-9]*Z$",
"description": "created date"
},
"updated_by": {
"type": "string",
"description": "user who updated the object"
},
"updated_at": {
"format": "date-time",
"type": "string",
"pattern": "^\\d{4}-\\d{2}-\\d{2}[T ]\\d{2}:\\d{2}:\\d{2}\\.{0,1}[0-9]*Z$",
"description": "created date"
},
"type": {
"type": "string",
"description": "action plan type",
"enum": [
"overall_score_improvement",
"remediation",
"issue_resolution",
"factor_score_improvement"
]
},
"status": {
"type": "string",
"description": "action plan status",
"enum": [
"active",
"completed"
]
},
"organization_domain": {
"type": "string",
"description": "primary domain of the company"
},
"archived_at": {
"anyOf": [
{
"format": "date-time",
"type": "string",
"pattern": "^\\d{4}-\\d{2}-\\d{2}[T ]\\d{2}:\\d{2}:\\d{2}\\.{0,1}[0-9]*Z$"
},
{
"type": "string",
"maxLength": 0
}
],
"description": "archived date"
},
"synchronized_at": {
"anyOf": [
{
"format": "date-time",
"type": "string",
"pattern": "^\\d{4}-\\d{2}-\\d{2}[T ]\\d{2}:\\d{2}:\\d{2}\\.{0,1}[0-9]*Z$"
},
{
"type": "string",
"maxLength": 0
}
],
"description": "synchronized date"
},
"is_custom_scorecard": {
"type": "boolean",
"description": "true if this action plan is based on a custom scorecard, false otherwise"
},
"company_name": {
"type": "string"
},
"company_score": {
"type": "integer",
"description": "security score from 0 to 100"
},
"factor_scores": {
"type": "array",
"items": {
"type": "object",
"properties": {
"factor": {
"type": "string",
"description": "factor name/id"
},
"score": {
"type": "integer",
"description": "security score from 0 to 100"
}
},
"additionalProperties": false
}
},
"target": {
"type": "object",
"properties": {
"factor_score_targets": {
"type": "array",
"items": {
"type": "object",
"properties": {
"factor": {
"type": "string",
"description": "factor name/id"
},
"score": {
"type": "integer",
"description": "security score from 0 to 100"
}
},
"additionalProperties": false
}
},
"overall_score": {
"type": "number",
"description": "overall score of the action plan if applies"
}
}
},
"criteria": {
"type": "object",
"properties": {
"factors": {
"type": "array",
"items": {
"type": "string",
"description": "factor name/id"
},
"description": "factors associated to the action plan if applies"
},
"issues": {
"type": "array",
"items": {
"description": "issue type (permanent key)",
"type": "string"
},
"description": "issues associated to the action plan if applies"
}
}
},
"is_managed": {
"type": "boolean"
},
"is_published": {
"type": "boolean"
},
"managed_scorecard": {
"type": "string"
},
"total_issues": {
"type": "number",
"description": "number of issues associated to the action plan"
},
"closed_issues": {
"type": "number",
"description": "number of closed issues associated to the action plan"
},
"progress": {
"type": "number",
"description": "percentage of progress"
}
}
}
},
"size": {
"description": "The number of records to be returned per page",
"type": "integer"
},
"page": {
"description": "The page number to be returned",
"type": "integer"
}
},
"required": [
"entries",
"size",
"page"
]
}Work with this as data
Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for schemas
4 MCP tools reach this
find_json_schemasBrowse and filter every JSON Schema in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/security-scorecard-action-plan-list"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.