Vex Lens API Reference

Operations

GET /api/v1/buildinfo

API alias for /buildinfo.json (same payload).

Responses:

GET /api/v1/vexlens/conflicts

Returns consensus projections that have one or more issuer conflicts, ordered by most recently computed. Conflict projections are those where issuer dispositions disagree, reducing the overall confidence score.

Parameters:

Responses:

POST /api/v1/vexlens/consensus

Evaluates all registered VEX statements for the given vulnerability-product pair and returns a weighted consensus disposition, confidence score, and contributing issuer breakdown. Returns 400 if inputs are missing or unparseable.

Responses:

POST /api/v1/vexlens/consensus:batch

Submits multiple vulnerability-product pairs in a single request and returns consensus results for each pair in order. Pairs that fail individually are reported with their error; other pairs in the batch are still evaluated.

Responses:

POST /api/v1/vexlens/consensus:withProof

Computes VEX consensus and includes the full proof object containing per-issuer verdicts, trust weights, and intermediate scoring steps. Use this variant when an auditable evidence trail is required alongside the consensus result.

Responses:

POST /api/v1/vexlens/deltas/compute

Computes a structured delta report between two named VEX snapshots, identifying added, removed, and changed vulnerability-product dispositions. Returns 400 if either snapshot ID is not found.

Responses:

POST /api/v1/vexlens/gating/snapshots/{snapshotId}/gate

Applies noise-gating rules to the specified VEX snapshot, filtering low-signal edges and low-confidence verdicts. Returns the gated snapshot with edge and verdict counts after filtering. Returns 404 if the snapshot ID is not found.

Parameters:

Responses:

GET /api/v1/vexlens/gating/statistics

Returns aggregated noise-gating statistics for the tenant over an optional time window, including total snapshots processed, edge reduction percentages, total verdicts surfaced versus damped, and average damping rate.

Parameters:

Responses:

GET /api/v1/vexlens/issuers

Returns the list of VEX issuers registered with VexLens, optionally filtered by category, minimum trust tier, status, or search term. Results are paginated via limit and offset parameters.

Parameters:

Responses:

POST /api/v1/vexlens/issuers

Registers a new VEX issuer with VexLens, associating an issuer ID with a trust tier, category, and optional initial keys. Returns 201 Created with the new issuer detail record. Returns 400 if the issuer ID is already registered or inputs are invalid.

Responses:

GET /api/v1/vexlens/issuers/{issuerId}

Returns the full detail record for a specific VEX issuer by ID including trust tier, registered keys, category, and current status. Returns 404 if the issuer ID is not registered.

Parameters:

Responses:

DELETE /api/v1/vexlens/issuers/{issuerId}

Revokes a VEX issuer from VexLens, causing future consensus computations to exclude all VEX statements from this issuer. Returns 204 No Content on success. Returns 404 if the issuer is not registered.

Parameters:

Responses:

POST /api/v1/vexlens/issuers/{issuerId}/keys

Adds a cryptographic public key to an existing VEX issuer for statement signature verification. Returns the updated issuer detail record with the new key included. Returns 404 if the issuer is not found.

Parameters:

Responses:

DELETE /api/v1/vexlens/issuers/{issuerId}/keys/{fingerprint}

Revokes a specific cryptographic key from a VEX issuer by fingerprint, preventing future VEX statements signed with that key from being accepted. Returns 204 No Content on success. Returns 404 if either the issuer or key fingerprint is not found.

Parameters:

Responses:

GET /api/v1/vexlens/projections

Queries stored consensus projections with optional filtering by vulnerability ID, product key, outcome, confidence threshold, and computation time range. Returns a paginated list ordered by the requested sort field.

Parameters:

Responses:

GET /api/v1/vexlens/projections/history

Returns the ordered history of consensus projections computed for the specified vulnerability-product pair, newest first. Use this to track how the consensus disposition has changed over time as new VEX statements were ingested.

Parameters:

Responses:

GET /api/v1/vexlens/projections/latest

Returns the most recently computed consensus projection for the specified vulnerability-product pair. Returns 404 if no projection has been computed yet for the pair.

Parameters:

Responses:

GET /api/v1/vexlens/projections/{projectionId}

Returns the full detail record for a specific consensus projection by its unique ID including disposition, confidence, source statements, and conflict indicators. Returns 404 if the projection ID is not found.

Parameters:

Responses:

GET /api/v1/vexlens/stats

Returns aggregate statistics for consensus projections scoped to the tenant including total projection count, distribution by disposition, average confidence score, and conflict rate.

Responses:

GET /buildinfo.json

Image build provenance (module, gitSha, gitCommitTime, imageBuiltAt, branch) for drift detection.

Responses: