How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Canonical Security API

The Security API from Canonical — 15 operation(s) for security.

Canonical Security API is one of 122 APIs that Canonical publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Security. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, and release notes.

This API exposes 17 operations across 15 paths, and defines 46 schemas. It is described by OpenAPI 3.2.0, at version v1.

Requests are made against the base URL https://api.snapcraft.io.

17 operations 15 paths 46 schemas 3 DELETE9 GET2 POST3 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
v1
Base URL
https://api.snapcraft.io
Resource Areas
1

Paths & Operations 17

Across 15 paths, the API surfaces 17 operations — 3 DELETE, 9 GET, 2 POST, 3 PUT. Each is listed below with its method, path, parameters, and response codes.

Security 17
GET
/security/compat/notices.json
Get security compat notices json
getSecurityCompatNoticesJson 8 params → 200422
GET
/security/compat/notices/{notice_id}.json
Get security compat notices {notice id} json
getSecurityCompatNotices{noticeId}Json 2 params → 200404
GET
/security/cves.json
Get security cves json
getSecurityCvesJson 13 params → 200422
GET
/security/cves/{cve_id}.json
Get security cves {cve id} json
getSecurityCves{cveId}Json 2 params → 200404
GET
/security/notices.json
Get security notices json
getSecurityNoticesJson 8 params → 200422
GET
/security/notices/{notice_id}.json
Get security notices {notice id} json
getSecurityNotices{noticeId}Json 2 params → 200404
GET
/security/page/notices.json
Get security page notices json
getSecurityPageNoticesJson 8 params → 200422
GET
/security/releases.json
Get security releases json
getSecurityReleasesJson → 200404
GET
/security/releases/{release_codename}.json
Get security releases {release codename} json
getSecurityReleases{releaseCodename}Json 1 param → 200404
PUT
/security/updates/cves.json
Replace security updates cves json
putSecurityUpdatesCvesJson body → 200400413422
DELETE
/security/updates/cves/{cve_id}.json
Delete security updates cves {cve id} json
deleteSecurityUpdatesCves{cveId}Json 1 param → 200404
POST
/security/updates/notices.json
Create security updates notices json
postSecurityUpdatesNoticesJson body → 200422
DELETE
/security/updates/notices/{notice_id}.json
Delete security updates notices {notice id} json
deleteSecurityUpdatesNotices{noticeId}Json 1 param → 200404
PUT
/security/updates/notices/{notice_id}.json
Replace security updates notices {notice id} json
putSecurityUpdatesNotices{noticeId}Json 1 param body → 200404422
POST
/security/updates/releases.json
Create security updates releases json
postSecurityUpdatesReleasesJson body → 200422
DELETE
/security/updates/releases/{release_codename}.json
Delete security updates releases {release codename} json
deleteSecurityUpdatesReleases{releaseCodename}Json 1 param → 200400404
PUT
/security/updates/releases/{release_codename}.json
Replace security updates releases {release codename} json
putSecurityUpdatesReleases{releaseCodename}Json 1 param body → 200404422

Schemas 46

The contract defines 46 schemas that model the data the API accepts and returns. The most detailed are CVEAPIDetailed (19 properties), CVEAPI (18 properties), CVEImport (17 properties), NoticeAPIDetailedSchemaV2 (14 properties). Each schema is shown below with its type and property counts.

MessageWithErrors
object
2 properties
RelatedNotices
object
2 properties
NoticeAPI
object
11 properties 5 required
CvssV4
object
14 properties
CveBaseMetricV4Import
object
1 property
CvssV4ModifiedBaseMetricsImport
object
3 properties
NoticeAPIDetailedSchemaV2
object
14 properties 5 required
CvePackage
object
5 properties 4 required
CVEAPI
object
18 properties 1 required
NoticesAPISchemaV2
object
4 properties
CvssV4SubsequentSystemImpactMetrics
object
3 properties
CvssV4SecurityRequirements
object
3 properties
CvssV4SupplementalMetrics
object
6 properties
CVESummaryV2
object
2 properties
CveImpactImport
object
2 properties
CvssV4EnvironmentalMetrics
object
2 properties
CreateNoticeImport
object
10 properties 5 required
NoticeImport
object
10 properties 5 required
CVEsAPI
object
4 properties
CvssV4ThreatMetrics
object
1 property
PageNoticesAPI
object
4 properties
ReleaseAPI
object
9 properties 8 required
CveBaseMetricV4
object
1 property
NoticeReleases
object
3 properties
Note
object
2 properties 2 required
Message
object
1 property
CvssV4BaseMetricsImport
object
3 properties
CvssV4Import
object
14 properties
NoticeAPIDetailed
object
14 properties 5 required
PageNoticeAPI
object
8 properties 4 required
CvssV3
object
12 properties
CVEAPIDetailed
object
19 properties 1 required
CvssV4VulnerableSystemImpactMetrics
object
3 properties
CvssV4BaseMetrics
object
3 properties
NoticePackage
object
10 properties 3 required
CVEImport
object
17 properties 1 required
NoticesAPI
object
4 properties
UpdateRelease
object
8 properties 8 required
CvssV4ExploitabilityMetrics
object
5 properties
CveBaseMetric
object
3 properties
CvssV4ModifiedBaseMetrics
object
3 properties
Status
object
5 properties 2 required
ReleasesAPI
object
1 property
CvssV4EnvironmentalMetricsImport
object
2 properties
Release
object
8 properties 8 required
CveImpact
object
2 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

canonical-security-api-openapi.yml Raw ↑

Other APIs Canonical publishes across the network.

Snap Store API
Charmhub API
MAAS API
Juju Client / Controller API
Launchpad Web Services API
Ubuntu Pro Client API
Canonical Assertions API
Canonical Search API
Canonical Snaps API
MicroCeph REST API
Canonical App Authorization Service API
Canonical Application API
Where this information came from

This is an independent, third-party profile of Canonical Security API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.