Context API

The /context API connects code, cloud assets, application boundaries, dependencies, and organizational knowledge. See Context Engine for how this data informs findings.

Authenticate as described in Authentication. Reads generally need the ConfigRead permission and anything that changes state or starts a job needs ConfigWrite; a few routes (some dependency routes, cloud scan status and cloud connector PR status) only require a valid tenant token. Operations that start work (scans, SBOM runs, report jobs, schema reversing) are asynchronous: a start response means the job was accepted, not that it finished, so poll the matching status call. Most list calls page with nextToken (see Pagination); the dependency routes use cursor, and some cloud recon and SBOM routes use limit/offset or page/pageSize. Each guide states which applies.

Guides in this section

• Applications, repositories, and schemas: logical applications and their rebuilds, entrypoints, artifacts and deployments, CI/CD pipelines, repositories and projects, execution recipes, API schemas, and repository context and repo-scope scans.

• Asset inventory: the unified and per-category inventory of cloud and code assets, plus deleting assets and editing their tags and flags.

• Asset graph and infrastructure graphs: graph search, subgraphs, reachability, attack paths, and versioned infrastructure graphs per cloud account.

• Cloud scans and cloud recon: start cloud scans, run the cloud connector agent, and read cloud recon analysis (overview, hotspots, IAM posture, exposures, trust relationships).

• Dependencies and SBOMs: active and historical dependency inventory, package exposure, commit diffs, and SBOM generation, replay and deletion.

• Documents, memories, and reports: the document vault, memories, organization context, RAG resync, and asynchronous reports.

Published operation index

This index comes from the published specification. Check its request and response schemas before calling an operation; deployment versions and feature availability can differ.

Method	Path	Operation
GET	/context/applications	Get Applications
POST	/context/applications	Create Application
POST	/context/applications/rebuild	Rebuild Applications
GET	/context/applications/rebuilds/{runId}	Get Application Rebuild
DELETE	/context/applications/{applicationId}	Delete Application
GET	/context/applications/{applicationId}	Get Application
PATCH	/context/applications/{applicationId}	Update Application
GET	/context/applications/{applicationId}/execution-recipe	Get Application Execution Recipe
GET	/context/applications/{applicationId}/schema	Get Application Schema
GET	/context/artifact-deployments	List Artifact Deployments
GET	/context/artifact-deployments/{deploymentId}	Get Artifact Deployment
GET	/context/artifacts	List Artifacts
DELETE	/context/artifacts/{artifactId}	Delete Artifact
GET	/context/artifacts/{artifactId}	Get Artifact
GET	/context/asset-graph/attack-paths	List Asset Graph Attack Paths
GET	/context/asset-graph/landing	Get Asset Graph Landing
GET	/context/asset-graph/node	Get Asset Graph Node
GET	/context/asset-graph/nodes	List Asset Graph Nodes
GET	/context/asset-graph/reachability	Get Asset Graph Reachability
GET	/context/asset-graph/retrieve	Retrieve Asset Graph Nodes
GET	/context/asset-graph/search	Search Asset Graph
GET	/context/asset-graph/subgraph	Get Asset Graph Subgraph
GET	/context/asset-graph/summary	Get Asset Graph Summary
GET	/context/asset-inventory	List Asset Inventory
GET	/context/asset-inventory/ai-ml	List AI/ML Assets
GET	/context/asset-inventory/ai-ml/{id}	Get AI/ML Asset
GET	/context/asset-inventory/artifact-repositories	List Artifact Repositories Assets
GET	/context/asset-inventory/artifact-repositories/{id}	Get Artifact Repositories Asset
GET	/context/asset-inventory/artifacts	List Artifacts Assets
GET	/context/asset-inventory/artifacts/{id}	Get Artifacts Asset
GET	/context/asset-inventory/cdn-and-dns	List CDN and DNS Assets
GET	/context/asset-inventory/cdn-and-dns/{id}	Get CDN and DNS Asset
GET	/context/asset-inventory/ci-cd	List CI/CD Assets
GET	/context/asset-inventory/ci-cd/{id}	Get CI/CD Asset
GET	/context/asset-inventory/cluster	List Cluster Assets
GET	/context/asset-inventory/cluster/{id}	Get Cluster Asset
GET	/context/asset-inventory/compute	List Compute Assets
GET	/context/asset-inventory/compute/{id}	Get Compute Asset
GET	/context/asset-inventory/connectivity	List Connectivity Assets
GET	/context/asset-inventory/connectivity/{id}	Get Connectivity Asset
GET	/context/asset-inventory/container	List Container Assets
GET	/context/asset-inventory/container/{id}	Get Container Asset
GET	/context/asset-inventory/data-pipeline	List Data Pipeline Assets
GET	/context/asset-inventory/data-pipeline/{id}	Get Data Pipeline Asset
GET	/context/asset-inventory/database	List Database Assets
GET	/context/asset-inventory/database/{id}	Get Database Asset
GET	/context/asset-inventory/endpoints	List Asset Inventory Endpoints
GET	/context/asset-inventory/endpoints/{id}	Get Asset Inventory Endpoint
GET	/context/asset-inventory/identity	List Identity Assets
GET	/context/asset-inventory/identity/{id}	Get Identity Asset
GET	/context/asset-inventory/load-balancer	List Load Balancer Assets
GET	/context/asset-inventory/load-balancer/{id}	Get Load Balancer Asset
GET	/context/asset-inventory/messaging	List Messaging Assets
GET	/context/asset-inventory/messaging/{id}	Get Messaging Asset
GET	/context/asset-inventory/network	List Network Assets
GET	/context/asset-inventory/network/{id}	Get Network Asset
GET	/context/asset-inventory/observability	List Observability Assets
GET	/context/asset-inventory/observability/{id}	Get Observability Asset
GET	/context/asset-inventory/pipelines	List Pipelines Assets
GET	/context/asset-inventory/pipelines/{id}	Get Pipelines Asset
GET	/context/asset-inventory/projects	List Projects Assets
GET	/context/asset-inventory/projects/{id}	Get Projects Asset
GET	/context/asset-inventory/public	List Public Asset Inventory
GET	/context/asset-inventory/repos	List Repos Assets
GET	/context/asset-inventory/repos/{id}	Get Repos Asset
GET	/context/asset-inventory/security	List Security Assets
GET	/context/asset-inventory/security/{id}	Get Security Asset
GET	/context/asset-inventory/serverless	List Serverless Assets
GET	/context/asset-inventory/serverless/{id}	Get Serverless Asset
GET	/context/asset-inventory/storage-and-backup	List Storage and Backup Assets
GET	/context/asset-inventory/storage-and-backup/{id}	Get Storage and Backup Asset
DELETE	/context/asset-inventory/{category}/{id}	Delete Asset
PATCH	/context/asset-inventory/{category}/{id}/flags	Patch Asset Flags
PATCH	/context/asset-inventory/{category}/{id}/tags	Patch Asset Tags
GET	/context/cicd-pipelines	List CI/CD Pipelines
DELETE	/context/cicd-pipelines/{pipelineId}	Delete CI/CD Pipeline
GET	/context/cicd-pipelines/{pipelineId}	Get CI/CD Pipeline
POST	/context/cloud-connector-pr/runs	Start Cloud Connector PR Run
GET	/context/cloud-connector-pr/runs/{runId}	Get Cloud Connector PR Run
GET	/context/cloud-connector-pr/status	Get Cloud Connector PR Status
GET	/context/cloud-recon/accounts/{accountId}/cross-account-relationships	Get Cloud Recon Cross-Account Relationships
GET	/context/cloud-recon/accounts/{accountId}/discovered-nodes	Get Cloud Recon Discovered Nodes
GET	/context/cloud-recon/accounts/{accountId}/graph-gaps	Get Cloud Recon Graph Gaps
GET	/context/cloud-recon/accounts/{accountId}/hotspots	Get Cloud Recon Hotspots
GET	/context/cloud-recon/accounts/{accountId}/iam-posture	Get Cloud Recon IAM Posture
GET	/context/cloud-recon/accounts/{accountId}/network-exposures	Get Cloud Recon Network Exposures
GET	/context/cloud-recon/accounts/{accountId}/overview	Get Cloud Recon Account Overview
GET	/context/cloud-recon/accounts/{accountId}/scans/latest	Get Latest Cloud Recon Scan
GET	/context/cloud-recon/accounts/{accountId}/security-boundaries	Get Cloud Recon Security Boundaries
GET	/context/cloud-recon/accounts/{accountId}/synthesis/latest	Get Latest Cloud Recon Account Synthesis
GET	/context/cloud-recon/accounts/{accountId}/topology	Get Cloud Recon Topology
GET	/context/cloud-recon/accounts/{accountId}/traffic-flows	Get Cloud Recon Traffic Flows
GET	/context/cloud-recon/accounts/{accountId}/trusted-services	Get Cloud Recon Trusted Services
GET	/context/cloud-recon/organization/synthesis/latest	Get Latest Cloud Recon Org Synthesis
POST	/context/cloud-recon/scans	Persist Cloud Recon Scan
GET	/context/cloud-recon/tenants/cross-account-trusts	Get Tenant Cloud Recon Cross-Account Trusts
POST	/context/cloud-scan/start	Start Cloud Scan
GET	/context/cloud-scan/{scanId}/status	Get Cloud Scan Status
DELETE	/context/deps	Delete dependency data
GET	/context/deps	List Tenant Wide Dependencies (Historical)
GET	/context/deps/active	List Tenant Wide Active Dependencies
GET	/context/deps/active/summary	Tenant Wide Active Dependency Summary
GET	/context/deps/by-ref/{bomRef}	Get Dependencies by Bom Ref
GET	/context/deps/dependents/{bomRef}	List Dependents of a Bom Ref
GET	/context/deps/exposure	Global package exposure by version filter (semver or hash)
GET	/context/deps/repository/{repositoryId}/project/{projectId}/active	List Active Dependencies
GET	/context/deps/repository/{repositoryId}/project/{projectId}/at/{commit}	Dependencies at commit
GET	/context/deps/repository/{repositoryId}/project/{projectId}/diff	Dependency diff between two commits
GET	/context/deps/repository/{repositoryId}/project/{projectId}/exposure	Project package exposure by version filter (semver or hash)
GET	/context/deps/repository/{repositoryId}/project/{projectId}/history	Package exposure history (windows)
GET	/context/deps/without-lockfile	List projects/repos without lockfiles
GET	/context/entrypoints	List Entrypoints
DELETE	/context/entrypoints/{entrypointId}	Delete Entrypoint
GET	/context/entrypoints/{entrypointId}	Get Entrypoint
GET	/context/infrastructure/graphs	List Infrastructure Graphs
GET	/context/infrastructure/graphs/info	Get Infrastructure Graph Info
GET	/context/infrastructure/graphs/summary	Get Infrastructure Graph Summary
GET	/context/infrastructure/graphs/{accountId}	Get Infrastructure Graph
GET	/context/infrastructure/graphs/{accountId}/download	Get Infrastructure Graph Download URL
GET	/context/infrastructure/graphs/{accountId}/versions	List Infrastructure Graph Versions
GET	/context/infrastructure/graphs/{accountId}/versions/{version}	Get Infrastructure Graph Version
GET	/context/k8s/collector-clusters	List K8s Collector Clusters
GET	/context/memories	Get Memories
POST	/context/memories	Create Memory
GET	/context/memories/document/{documentId}	Get Memories By Document
GET	/context/memories/document/{documentId}/type	Get Memories By Document And Type
POST	/context/memories/grep	Grep Memories
POST	/context/memories/search	Search Memories
GET	/context/memories/type	Get Memories By Type
DELETE	/context/memories/{memoryId}	Delete Memory
GET	/context/memories/{memoryId}	Get Memory
PATCH	/context/memories/{memoryId}	Update Memory
POST	/context/memories/{memoryId}/retract	Retract Memory
GET	/context/memories/{memoryId}/versions	Get Memory Versions
GET	/context/organization	Get Organization Context
PATCH	/context/organization	Update Classification of the Organization
PUT	/context/organization	Upsert Classification of the Organization
GET	/context/organization/runs/{runId}	Get Organization Context Run
POST	/context/rag/resync	Resync RAG Vector Store
GET	/context/repo-scans	List Repo Context Scans
POST	/context/repo-scans	Create Repo Context Scan
GET	/context/repo-scans/{scanId}	Get Repo Context Scan
PATCH	/context/repo-scans/{scanId}	Update Repo Context Scan
POST	/context/repo-scope/scans	Start Repo-Scope Scan
GET	/context/repo-scope/scans/{scanId}	Get Repo-Scope Scan
POST	/context/reports	Create Report Generation Job
GET	/context/reports/{jobId}	Get Report Status
GET	/context/repositories	Get Contexts of Repositories
DELETE	/context/repositories/{repositoryId}	Delete Repository
GET	/context/repositories/{repositoryId}	Get Repository
PATCH	/context/repositories/{repositoryId}	Update Repository
POST	/context/repositories/{repositoryId}/execution-recipes/discover	Start Repository Execution Recipe Discovery
GET	/context/repositories/{repositoryId}/projects	List Projects
DELETE	/context/repositories/{repositoryId}/projects/{projectId}	Delete Project
GET	/context/repositories/{repositoryId}/projects/{projectId}	Get Project
PATCH	/context/repositories/{repositoryId}/projects/{projectId}	Update Project
GET	/context/repositories/{repositoryId}/projects/{projectId}/execution-recipe	Get Project Execution Recipe
GET	/context/repositories/{repositoryId}/projects/{projectId}/execution-recipe/validations	List Project Execution Recipe Validations
GET	/context/repositories/{repositoryId}/projects/{projectId}/execution-recipe/versions	List Project Execution Recipe Versions
GET	/context/repositories/{repositoryId}/projects/{projectId}/schema	Get Project Schema
POST	/context/repositories/{repositoryId}/projects/{projectId}/schema	Upload Project Schema
GET	/context/repositories/{repositoryId}/projects/{projectId}/schema/metadata	Get Project Schema Metadata
GET	/context/repositories/{repositoryId}/projects/{projectId}/schema/raw	Get Project Schema Raw File
POST	/context/repositories/{repositoryId}/projects/{projectId}/schema/trigger	Trigger Project Schema Reversing
POST	/context/repositories/{repositoryId}/repo-context/trigger	Trigger Repository Context
POST	/context/sbomingestor/replay	Compute Dependencies Repository/Project SBOM Ingest Replay
DELETE	/context/sboms	Delete SBOMs for tenant
POST	/context/sboms/generate	Generate SBOM
GET	/context/sboms/repository/{repositoryId}/latest	Get Latest SBOMs for Repository
GET	/context/sboms/repository/{repositoryId}/project/{projectId}	Get Repository/Project SBOMs
POST	/context/sboms/resolve	Get or generate SBOM
POST	/context/sboms/runs	Start SBOM Run
POST	/context/sboms/scan	Scan SBOM (get-or-generate)
GET	/context/sboms/tree	Get SBOM key tree for tenant
GET	/context/schemas	List Schemas
GET	/context/vault/document/{documentId}/text	Get Vault Document Text
POST	/context/vault/file	Post Vault File
DELETE	/context/vault/file/{fileId}	Delete Vault File
GET	/context/vault/file/{fileId}	Get Vault File
PATCH	/context/vault/file/{fileName}	Patch Vault File
GET	/context/vault/files	Get Vault Files
GET	/context/vault/files/list	Get Vault Files List
POST	/context/vault/index	Index Vault Files
POST	/context/vault/onboard	Trigger Vault Onboarding
POST	/context/vault/search	Search Vault Documents