Excititor API Reference

Field	Value
Source spec	`excititor/openapi/v1.json`
OpenAPI version	`3.1.0`
API version	`1.0.0-alpha1`
Operations	13
Path filter	All paths

Operations

`POST /airgap/v1/vex/import`

Property	Value
Operation ID	-
Tags	-
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	Accepted	-
`400`	Validation error	`application/json`
`403`	Trust validation failed	`application/json`

`GET /attestations/vex/list`

List VEX attestations

Property	Value
Operation ID	-
Tags	-
Auth	Not declared
Request body	-

Parameters:

Name	In	Required
`X-StellaOps-TenantId`	`header`	no
`cursor`	`query`	no
`limit`	`query`	no
`productKey`	`query`	no
`vulnerabilityId`	`query`	no

Responses:

Status	Description	Content types
`200`	Attestation list response	`application/json`

`GET /attestations/vex/lookup`

Lookup attestations by linkset or observation

Property	Value
Operation ID	-
Tags	-
Auth	Not declared
Request body	-

Parameters:

Name	In	Required
`X-StellaOps-TenantId`	`header`	no
`limit`	`query`	no
`linksetId`	`query`	no
`observationId`	`query`	no

Responses:

Status	Description	Content types
`200`	Attestation lookup response	`application/json`
`400`	Missing required parameter	`application/json`

`GET /attestations/vex/{attestationId}`

Get VEX attestation details with DSSE verification state

Property	Value
Operation ID	-
Tags	-
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`X-StellaOps-TenantId`	`header`	no
`attestationId`	`path`	yes

Responses:

Status	Description	Content types
`200`	Attestation detail response with chain-of-custody	`application/json`
`404`	Attestation not found	`application/json`

`GET /evidence/vex/bundle/{bundleId}`

Get VEX evidence bundle details

Property	Value
Operation ID	-
Tags	-
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`X-StellaOps-TenantId`	`header`	no
`bundleId`	`path`	yes

Responses:

Status	Description	Content types
`200`	Bundle detail response	`application/json`
`404`	Bundle not found	`application/json`

`GET /evidence/vex/list`

List VEX evidence exports

Property	Value
Operation ID	-
Tags	-
Auth	Not declared
Request body	-

Parameters:

Name	In	Required
`X-StellaOps-TenantId`	`header`	no
`cursor`	`query`	no
`limit`	`query`	no

Responses:

Status	Description	Content types
`200`	Evidence list response	`application/json`

`GET /evidence/vex/lookup`

Lookup evidence for vulnerability/product pair

Property	Value
Operation ID	-
Tags	-
Auth	Not declared
Request body	-

Parameters:

Name	In	Required
`X-StellaOps-TenantId`	`header`	no
`productKey`	`query`	yes
`vulnerabilityId`	`query`	yes

Responses:

Status	Description	Content types
`200`	Evidence lookup response	`application/json`

`GET /excititor/health`

Health check

Property	Value
Operation ID	-
Tags	-
Auth	Not declared
Request body	-

Responses:

Status	Description	Content types
`200`	Healthy	`application/json`

`GET /excititor/status`

Service status (aggregation-only metadata)

Property	Value
Operation ID	-
Tags	-
Auth	Not declared
Request body	-

Responses:

Status	Description	Content types
`200`	OK	`application/json`

`GET /obs/excititor/timeline`

VEX timeline stream (SSE)

Property	Value
Operation ID	-
Tags	-
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`cursor`	`query`	no	Numeric cursor or Last-Event-ID
`limit`	`query`	no

Responses:

Status	Description	Content types
`200`	Event stream	`text/event-stream`
`400`	Invalid cursor	`application/json`

`GET /vex/observations`

List VEX observations with filters

Property	Value
Operation ID	-
Tags	-
Auth	Not declared
Request body	-

Parameters:

Name	In	Required
`X-StellaOps-TenantId`	`header`	no
`cursor`	`query`	no
`limit`	`query`	no
`productKey`	`query`	no
`providerId`	`query`	no
`vulnerabilityId`	`query`	no

Responses:

Status	Description	Content types
`200`	Observation list response	`application/json`
`400`	Missing required filter	`application/json`

`GET /vex/observations/count`

Get observation count for tenant

Property	Value
Operation ID	-
Tags	-
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`X-StellaOps-TenantId`	`header`	no

Responses:

Status	Description	Content types
`200`	Count response	`application/json`

`GET /vex/observations/{observationId}`

Get VEX observation by ID

Property	Value
Operation ID	-
Tags	-
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`X-StellaOps-TenantId`	`header`	no
`observationId`	`path`	yes

Responses:

Status	Description	Content types
`200`	Observation detail response	`application/json`
`404`	Observation not found	`application/json`