Cloud Audits API

Query cloud audit inventories and posture findings via the Nullify API

Cloud audit endpoints live under the /classifier namespace. They expose the service inventory, asset graph, and posture signals that power Cloud Audits.

Base URL

https://api.<TENANT>.nullify.ai

List Applications

Retrieve the catalog of applications Nullify is monitoring, along with ownership metadata and posture summaries:

Get Applications

get

Retrieves all applications for the tenant

Query parameters

azureOrganizationIdstringOptional

The Azure organization ID

bitbucketWorkspaceIdstringOptional

The Bitbucket workspace ID

githubOwnerIdinteger · int64Optional

The Github owner ID

gitlabGroupIdinteger · int64Optional

The GitLab group ID

installationIdstringOptional

The Nullify installation ID

azureRepositoryIdstring[]Optional

githubRepositoryIdinteger · int64[]Optional

githubTeamIdinteger · int64Optional

bitbucketRepositoryIdstring[]Optional

Responses

200

OK

application/json

403

Forbidden

application/json

500

Internal Server Error

application/json

get

/classifier/applications

HTTPcURLJavaScriptPython

GET /classifier/applications HTTP/1.1
Accept: */*

{
  "applications": [
    {
      "components": [
        {
          "discovery": {
            "apiSpecs": [
              {
                "contentRef": {
                  "hash": "text",
                  "location": "text",
                  "size": 1,
                  "type": "text"
                },
                "format": "text",
                "id": "text",
                "metadata": {
                  "basePath": "text",
                  "numEndpoints": 1,
                  "servers": [
                    "text"
                  ],
                  "version": "text"
                },
                "name": "text",
                "source": "text",
                "type": "text"
              }
            ],
            "endpoints": [
              "text"
            ],
            "frontendAssets": {
              "apiEndpoints": [
                "text"
              ],
              "exposedValues": 1,
              "routes": [
                "text"
              ]
            },
            "technologies": [
              "text"
            ]
          },
          "id": "text",
          "name": "text",
          "source": {
            "path": "text",
            "projectId": "text",
            "repositoryId": "text",
            "type": "text"
          },
          "type": "text"
        }
      ],
      "createdAt": "2026-02-14T10:18:20.430Z",
      "description": "text",
      "discovery": {
        "apiSpecs": [
          {
            "contentRef": {
              "hash": "text",
              "location": "text",
              "size": 1,
              "type": "text"
            },
            "format": "text",
            "id": "text",
            "metadata": {
              "basePath": "text",
              "numEndpoints": 1,
              "servers": [
                "text"
              ],
              "version": "text"
            },
            "name": "text",
            "source": "text",
            "type": "text"
          }
        ],
        "apiSurface": {
          "authenticatedEndpoints": 1,
          "coverage": 1,
          "publicEndpoints": 1,
          "totalEndpoints": 1
        },
        "securityProfile": {
          "exposedSecrets": 1,
          "recommendations": [
            "text"
          ],
          "riskScore": 1
        },
        "technologies": [
          "text"
        ]
      },
      "id": "text",
      "metadata": {
        "agentExecutionId": "text",
        "cacheKey": "text",
        "customFields": {
          "ANY_ADDITIONAL_PROPERTY": "text"
        },
        "generatedByAgentVersion": "text",
        "lastRebuildTime": "2026-02-14T10:18:20.430Z",
        "sourceRepositories": [
          "text"
        ],
        "sourceRepositoryCount": 1,
        "status": "text"
      },
      "name": "text",
      "tags": [
        "text"
      ],
      "tenantId": "text",
      "updatedAt": "2026-02-14T10:18:20.430Z",
      "version": "text"
    }
  ],
  "version": "text"
}

curl -s \
  -H "Accept: application/json" \
  -H "Authorization: Bearer <TOKEN>" \
  'https://api.<TENANT>.nullify.ai/classifier/applications?githubOwnerId=1234'

Get Repository Posture

Pull the cloud context associated with a specific repository or project:

Get Repository

get

Returns context about a repository

Path parameters

repositoryIdstringRequired

Query parameters

azureOrganizationIdstringOptional

The Azure organization ID

bitbucketWorkspaceIdstringOptional

The Bitbucket workspace ID

githubOwnerIdinteger · int64Optional

The Github owner ID

gitlabGroupIdinteger · int64Optional

The GitLab group ID

installationIdstringOptional

The Nullify installation ID

azureRepositoryIdstring[]Optional

githubRepositoryIdinteger · int64[]Optional

githubTeamIdinteger · int64Optional

bitbucketRepositoryIdstring[]Optional

Responses

200

OK

application/json

400

Bad Request

application/json

403

Forbidden

application/json

500

Internal Server Error

application/json

get

/classifier/repositories/{repositoryId}

HTTPcURLJavaScriptPython

GET /classifier/repositories/{repositoryId} HTTP/1.1
Accept: */*

{
  "repository": {
    "cacheKey": "text",
    "cicdPipelineSummary": {
      "prWorkflowCount": 1,
      "summary": "text",
      "workflows": [
        {
          "jobs": [
            {
              "name": "text",
              "steps": [
                {
                  "command": "text",
                  "name": "text",
                  "uses": "text"
                }
              ]
            }
          ],
          "name": "text",
          "path": "text",
          "platform": "text",
          "runsOnPr": true
        }
      ]
    },
    "description": "text",
    "graph": {
      "edges": [
        {
          "explanation": "text",
          "sourceId": "text",
          "targetId": "text",
          "type": "CONTRIBUTES_TO_PROJECT"
        }
      ],
      "nodes": [
        {
          "context": "text",
          "id": "text",
          "method": "PASSWORD",
          "objectType": "authentication",
          "status": "text"
        }
      ]
    },
    "id": "text",
    "isMonorepo": true,
    "isOpenAPISpecAvailable": true,
    "isTruncatedAnalysis": true,
    "name": "text",
    "notes": "text",
    "openAPISpecPath": [
      "text"
    ],
    "projects": [
      {
        "artifacts": [
          {
            "artifactType": "BROWSER_CLIENT",
            "availabilityImportance": "HIGH",
            "dataConfidentialityImportance": "HIGH",
            "entrypointPath": "text",
            "nonProduction": true,
            "otherType": "text",
            "systemIntegrityImportance": "HIGH"
          }
        ],
        "cacheKey": "text",
        "dataHandled": [
          "ADDRESS"
        ],
        "description": "text",
        "entrypoints": [
          {
            "affinityHints": [
              "text"
            ],
            "apiSpecs": [
              {
                "content": "text",
                "format": "JSON",
                "name": "text",
                "type": "ASYNCAPI",
                "version": "text"
              }
            ],
            "applicationTypes": [
              "CLI"
            ],
            "artifacts": [
              {
                "artifactName": "text",
                "description": "text",
                "id": "text",
                "name": "text",
                "nonProduction": true,
                "otherArtifactType": "text",
                "registries": [
                  {
                    "baseUrl": "text",
                    "id": "text",
                    "name": "text",
                    "otherType": "text",
                    "path": "text",
                    "type": "IMAGE_REGISTRY"
                  }
                ],
                "story": [
                  {
                    "command": "text",
                    "description": "text",
                    "otherTool": "text",
                    "relatedFiles": [
                      "text"
                    ],
                    "tool": "bazel",
                    "type": "COPY_OR_MOVE_FILE"
                  }
                ],
                "subArtifactPath": "text",
                "subArtifactType": "CONTAINER_IMAGE",
                "type": "CONTAINER_IMAGE"
              }
            ],
            "description": "text",
            "id": "text",
            "lineNumber": 1,
            "name": "text",
            "path": "text"
          }
        ],
        "id": "text",
        "isTruncatedAnalysis": true,
        "languages": [
          "Bicep"
        ],
        "name": "text",
        "notes": "text",
        "otherDataHandled": [
          "text"
        ],
        "pathPrefix": "text",
        "projectFiles": [
          "text"
        ],
        "repositoryReferences": [
          {
            "description": "text",
            "name": "text",
            "repositoryReferenceType": "dependency",
            "url": "text",
            "version": "text"
          }
        ],
        "securityImportance": "HIGH"
      }
    ],
    "public": true,
    "repositoryReferences": [
      {
        "description": "text",
        "isCloudToCodeConnected": true,
        "name": "text",
        "repositoryReferenceType": "dependency",
        "url": "text"
      }
    ],
    "submodules": [
      {
        "branch": "text",
        "name": "text",
        "path": "text",
        "url": "text"
      }
    ]
  },
  "version": "text"
}

curl -s \
  -H "Accept: application/json" \
  -H "Authorization: Bearer <TOKEN>" \
  'https://api.<TENANT>.nullify.ai/classifier/repositories/01J6EEXK3NKYKWW9XTPQYAF41N?githubOwnerId=1234'

Refresh Inventory

Request a rebuild of the application inventory when you add new connectors or infrastructure sources:

Rebuild Applications

post

Trigger application context rebuilding

Query parameters

azureOrganizationIdstringOptional

The Azure organization ID

bitbucketWorkspaceIdstringOptional

The Bitbucket workspace ID

githubOwnerIdinteger · int64Optional

The Github owner ID

gitlabGroupIdinteger · int64Optional

The GitLab group ID

installationIdstringOptional

The Nullify installation ID

azureRepositoryIdstring[]Optional

githubRepositoryIdinteger · int64[]Optional

githubTeamIdinteger · int64Optional

bitbucketRepositoryIdstring[]Optional

Body

application/json

forcebooleanRequired

providerOwnerIdstringRequired

Responses

200

OK

application/json

403

Forbidden

application/json

500

Internal Server Error

application/json

post

/classifier/applications/rebuild

HTTPcURLJavaScriptPython

POST /classifier/applications/rebuild HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 39

{
  "force": true,
  "providerOwnerId": "text"
}

{
  "status": "text",
  "version": "text"
}

curl -s -X POST \
  -H "Accept: application/json" \
  -H "Authorization: Bearer <TOKEN>" \
  'https://api.<TENANT>.nullify.ai/classifier/applications/rebuild?githubOwnerId=1234'

Retrieve Organizational Context

Fetch the service graph Nullify uses to route cloud audit findings to the right owners:

Get Organization Context

get

Returns a classification of your entire organization and what software it builds

Query parameters

azureOrganizationIdstringOptional

The Azure organization ID

bitbucketWorkspaceIdstringOptional

The Bitbucket workspace ID

githubOwnerIdinteger · int64Optional

The Github owner ID

gitlabGroupIdinteger · int64Optional

The GitLab group ID

installationIdstringOptional

The Nullify installation ID

azureRepositoryIdstring[]Optional

githubRepositoryIdinteger · int64[]Optional

githubTeamIdinteger · int64Optional

bitbucketRepositoryIdstring[]Optional

Responses

200

OK

application/json

400

Bad Request

application/json

403

Forbidden

application/json

500

Internal Server Error

application/json

get

/classifier/organization

HTTPcURLJavaScriptPython

GET /classifier/organization HTTP/1.1
Accept: */*

{
  "organization": {
    "cacheKey": "text",
    "description": "text",
    "detailedOverview": "text",
    "documentCitations": [
      {
        "citation_id": "text",
        "document_id": "text",
        "document_name": "text",
        "page": "text",
        "source_type": "document",
        "title": "text"
      }
    ],
    "industries": [
      "AGRICULTURE"
    ],
    "name": "text",
    "notes": [
      {
        "citations": [
          {
            "citation_id": "text",
            "document_id": "text",
            "document_name": "text",
            "page": "text",
            "title": "text"
          }
        ],
        "classification": {
          "businessImpact": "CUSTOMER_FACING",
          "computePlatforms": [
            "BARE_METAL"
          ],
          "containsSensitiveData": true,
          "criticality": "CRITICAL",
          "dataClassification": "CONFIDENTIAL",
          "environments": [
            "DEVELOPMENT"
          ],
          "networkExposure": "AIR_GAPPED",
          "organizationalEntityType": "BUSINESS_UNIT",
          "riskLevel": "CRITICAL",
          "securityDomains": [
            "APPLICATION_SECURITY"
          ],
          "systemTypes": [
            "API"
          ]
        },
        "commentIds": [
          "text"
        ],
        "confidence": 1,
        "content": "text",
        "createdAt": "2026-02-14T10:18:20.430Z",
        "createdBy": "text",
        "crossReferences": [
          {
            "description": "text",
            "id": "text"
          }
        ],
        "id": "text",
        "isUserCreated": true,
        "memoryLineage": {
          "agentVersion": "text",
          "generationReason": "AGENT_UPGRADED",
          "isLatest": true,
          "parentMemoryId": "text",
          "parentSessionId": "text",
          "sessionId": "text",
          "timestamp": "2026-02-14T10:18:20.430Z"
        },
        "memoryType": "ANALYSIS",
        "metadata": {
          "documentMetadata": {
            "documentDescription": "text",
            "documentId": "text",
            "documentName": "text",
            "documentType": "API_SPEC",
            "documentVersion": "text",
            "source": "text",
            "structuralInfo": {
              "encoding": "text",
              "sections": [
                {
                  "endLine": 1,
                  "name": "text",
                  "startLine": 1,
                  "type": "text"
                }
              ],
              "totalCharacters": 1,
              "totalLines": 1
            }
          },
          "findingId": "text"
        },
        "priority": "CRITICAL",
        "resourceId": "text",
        "resourceType": "APP_CONTEXT",
        "tags": [
          "text"
        ],
        "title": "text",
        "updatedAt": "2026-02-14T10:18:20.430Z"
      }
    ],
    "onboarded": true,
    "otherIndustries": [
      "text"
    ],
    "products": [
      {
        "description": "text",
        "name": "text",
        "productType": "B2B_ON_PREMISE",
        "url": "text"
      }
    ],
    "questionnaire": {
      "additionalNotes": "text",
      "companyName": "text",
      "complianceStandards": [
        "text"
      ],
      "coreProductsServices": "text",
      "dataTypes": [
        "text"
      ],
      "files": [
        {
          "content": "text",
          "description": "text",
          "fileName": "text"
        }
      ],
      "impactConcerns": [
        "text"
      ],
      "perceivedThreatActors": [
        "text"
      ]
    },
    "timeZone": "text",
    "vaultFiles": [
      {
        "content": "text",
        "description": "text",
        "documentId": "text",
        "fileName": "text"
      }
    ]
  },
  "version": "text"
}

curl -s \
  -H "Accept: application/json" \
  -H "Authorization: Bearer <TOKEN>" \
  'https://api.<TENANT>.nullify.ai/classifier/organization?githubOwnerId=1234'

Cloud Audits enrich these datasets with misconfiguration evidence before handing work to Security Program Management campaigns and Auto-Fix.