How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
CoreStack

CoreStack App Sec Ops API

Application Security

Documentation Provider Profile APIs.io OpenAPI GitHub

CoreStack App Sec Ops API is one of 85 APIs that CoreStack publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include AppSecOps. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, and authentication docs.

This API exposes 49 operations across 42 paths, and defines 120 schemas. It is described by OpenAPI 3.2.0, at version 1.0.0.

Requests are made against a single base URL, /.

49 operations 42 paths 120 schemas 1 DELETE9 GET39 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0.0
Base URL
https://api.corestack.io/
Authentication
API Key
License
CoreStack Inc License
Terms of Service
View terms
Resource Areas
1

Authentication & Security 1

CoreStack App Sec Ops API declares 1 security scheme for authenticating requests. An API key is passed in the header as X-Auth-Token (auth_token).

Paths & Operations 49

Across 42 paths, the API surfaces 49 operations — 1 DELETE, 9 GET, 39 POST. Each is listed below with its method, path, parameters, and response codes.

AppSecOps 49

Application Security

POST
/v1/appsecops/applications/batch
List of application details
BatchApplication body → 500403401400200
POST
/v1/appsecops/applications/create
Creates an application
CreateApplication body → 500403401400200
GET
/v1/appsecops/applications/item/{application_id}
Get the application details
GetApplication 1 param → 500403401400200
POST
/v1/appsecops/applications/item/{application_id}
Update an application
UpdateApplication 1 param body → 500403401400200
POST
/v1/appsecops/applications/list
List of Applications
ListApplication body → 500403401400200
POST
/v1/appsecops/bcs_questions/answers_version/create
Create a new BCS answer version
BCSAnswerVersionCreate body → 500403401400200
POST
/v1/appsecops/bcs_questions/answers_version/history
Paginated history of BCS answer versions
BCSAnswerVersionHistory body → 500403401400200
GET
/v1/appsecops/bcs_questions/list
List of BCS questions
ListBCSQuestions → 500403401400200
POST
/v1/appsecops/container/findings/batch
List of container finding details
BatchContainerFindings body → 500403401400200
POST
/v1/appsecops/container/findings/ingest
Ingest container security findings from external tools
IngestContainerFindings body → 500403401400200
POST
/v1/appsecops/container/findings/list
List of container security findings with filtering and pagination support
ListContainerFindings body → 500403401400200
POST
/v1/appsecops/dashboard/summary/portfolio_hierarchy
List all Portfolios along with its associated applications and projects
PortfolioHierarchy body → 500403401400200
POST
/v1/appsecops/dashboard/summary/sbom_components
List of all SBOMs along with its associated components
SummarySbomComponents body → 500403401400200
POST
/v1/appsecops/dashboard/summary/sbom_vulnerabilities
List of all SBOM vulnerabilities
SummarySbomVulnerabilities body → 500403401400200
POST
/v1/appsecops/dashboard/summary/version_diff
Summary of differences in vulnerability and component counts compared to the previous SBOM build
SbomBuildDifferenceTrend body → 500403401400200
POST
/v1/appsecops/dashboard/top_actionable_issues
List top (x) actionable issues including vulnerabilities, threats and config violations
TopActionableIssues body → 500403401400200
POST
/v1/appsecops/dashboard/vulnerabilities/aggregation_by_component
List of aggregated vulnerability count by component properties
VulnerabilityByComponent body → 500403401400200
POST
/v1/appsecops/dashboard/vulnerabilities/trend_by_severity
List of vulnerabilities count by severity
VulnerabilityTrendBySeverity body → 500403401400200
POST
/v1/appsecops/portfolios/batch
List of portfolio details
BatchPortfolio body → 500403401400200
POST
/v1/appsecops/portfolios/create
Creates a portfolio
CreatePortfolio body → 500403401400200
GET
/v1/appsecops/portfolios/item/{portfolio_id}
Get the portfolio details
GetPortfolio 1 param → 500403401400200
POST
/v1/appsecops/portfolios/item/{portfolio_id}
Update the portfolio details
UpdatePortfolio 1 param body → 500403401400200
POST
/v1/appsecops/portfolios/list
List of portfolios
ListPortfolio body → 500403401400200
POST
/v1/appsecops/projects/batch
List of project details
BatchProject body → 500403401400200
POST
/v1/appsecops/projects/create
Creates a project
CreateProject body → 500403401400200
GET
/v1/appsecops/projects/item/{project_id}
Get the project details
GetProject 1 param → 500403401400200
POST
/v1/appsecops/projects/item/{project_id}
Update the project details
UpdateProject 1 param body → 500403401400200
POST
/v1/appsecops/projects/list
List of projects
ListProject body → 500403401400200
POST
/v1/appsecops/sbom_components/batch
List of sbom component details
BatchSbomComponents body → 500403401400200
POST
/v1/appsecops/sbom_definition/batch
List of SBOM definition details
BatchSbomDefinitions body → 500403401400200
POST
/v1/appsecops/sbom_definition/create
Creates a SBOM definition
CreateSbomDefinition body → 500403401400200
GET
/v1/appsecops/sbom_definition/item/{sbom_id}
Get SBOM definition details
GetSbomDefinition 1 param → 500403401400200
POST
/v1/appsecops/sbom_definition/item/{sbom_id}
Update SBOM definition details
UpdateSbomDefinition 1 param body → 500403401400200
GET
/v1/appsecops/sbom_definition/item/{sbom_id}/list_version
List of versions for a SBOM definition
ListSbomVersions 1 param → 500403401400200
POST
/v1/appsecops/sbom_definition/list
List of SBOM definitions
ListSbomDefinitions body → 500403401400200
POST
/v1/appsecops/sbom_version/batch
List of SBOM version details
BatchSbomVersions body → 500403401400200
POST
/v1/appsecops/sbom_version/create
Creates a SBOM Version
CreateSbomVersion body → 409500403401400200
POST
/v1/appsecops/sbom_version/diff/batch
List of SBOM version difference details between the given SBOM version IDs and its corresponding predecessor version IDs
BatchSbomVersionDifference body → 500403401400200
DELETE
/v1/appsecops/sbom_version/item/{version_id}
Delete SBOM version
DeleteSbomVersion 1 param → 500403401400200
GET
/v1/appsecops/sbom_version/item/{version_id}
Get SBOM version details
GetSbomVersion 1 param → 500403401400200
POST
/v1/appsecops/sbom_version/item/{version_id}
Update SBOM version details
UpdateSbomVersion 1 param body → 500403401400200
POST
/v1/appsecops/sbom_version/item/{version_id}/diff
Fetch SBOM version component and vulnerability difference details
SbomVersionDifference 1 param body → 500403401400200
GET
/v1/appsecops/sbom_version/item/{version_id}/make-release
Make SBOM version as the Release version
MakeSbomReleaseVersion 1 param → 500403401400200
POST
/v1/appsecops/sbom_version/vulnerabilities/batch
List of SBOM version vulnerabilities details
SbomVersionVulnerabilityBatch body → 500403401400200
POST
/v1/appsecops/vulnerabilities/prevalence/organization
List of organization(s) details where the vulnerabilities are prevalent
OrganizationalVulnerabilityPrevalence body → 500403401400200
POST
/v1/secops/vulnerabilities/batch
List of vulnerability details
BatchVulnerabilities body → 500403401400200
POST
/v2/appsecops/applications/create
Create an application with BCS scoring
CreateBCSApplicationV2 body → 500403401400200
GET
/v2/appsecops/applications/item/{application_id}
Get application details with BCS scoring
GetBCSApplicationV2 1 param → 500403401400200
POST
/v2/appsecops/applications/item/{application_id}
Update application with BCS scoring
UpdateBCSApplicationV2 1 param body → 500403401400200

Schemas 120

The contract defines 120 schemas that model the data the API accepts and returns. The most detailed are AppSecopsVulnerabilityCvssMetric (23 properties), SecurityFinding (13 properties), KnownExploitedVulnerability (13 properties), AppSecopsSbomComponent (12 properties). Each schema is shown below with its type and property counts.

AppSecopsSbomVulnerabilityResponse
object
2 properties
AppSecopsBCSQuestionsAnswers
object
5 properties
AppSecopsSbomComponentDetails
object
3 properties
AppSecopsTimeRangeFilter
AppSecopsPortfolioSortCriteria
object
2 properties 1 required
AppSecopsProject
AppSecopsVulnerabilityCvssMetric
object
23 properties
AppSecopsApplicationRequest
AppSecopsSbomComponentRequest
object
2 properties
AppSecopsSbomDefinitionsListResponse
object
2 properties
ContainerFindingsRequest
object
3 properties
AppSecopsVulnerabilityWithComponentDetails
object
2 properties
AppSecopsApplicationListRequest
object
3 properties
AppSecopsProjectResponse
AppSecopsOsvVulnerabilityAffectedPackageDetails
object
3 properties
QueryOperator
object
1 required
AppSecopsVulnerabilityOrganizationPrevalence
object
4 properties
AppSecopsApplication
ListResponse
object
2 properties
AppSecopsPortfolioHierarchyResponse
AppSecopsSbomDefinitionsListRequest
object
3 properties
AppSecopsSbomResourceMappingDetails
object
5 properties
AppSecopsLicenseDetails
object
2 properties
VulnerabilityNvdDescription
object
2 properties
AppSecopsBCSQuestionsAnswersVersionRequest
object
2 properties 2 required
AppSecopsApplicationV2Request
AppSecopsComponentReference
object
2 properties
AppSecopsSbomVersionBase
object
5 properties 4 required
AppSecopsApplicationBase
object
10 properties 5 required
AppSecopsBCSQuestion
object
10 properties
AppSecopsProjectBase
object
5 properties 3 required
ContainerFindingsBaseFilters
object
2 properties 1 required
AppSecopsTopActionableIssuesRequest
object
2 properties
AppSecopsVulnerabilityCveDetail
object
2 properties
AppSecopsSbomVersionVulnerability
object
7 properties
AppSecopsSbomVersionParserStatus
object
3 properties
AppSecopsProjectRequest
AppSecopsPortfolio
SecurityFinding
object
13 properties 9 required
AppSecopsBCSQuestionOption
object
6 properties
AppSecopsSbomVulnerability
object
8 properties
AppSecopsSbomDefinitionUpdateRequest
AppSecopsSbomVulnerabilityRequest
object
2 properties
AppSecopsVulnerabilityEpssScore
object
4 properties
RecordIdentity
object
3 properties
AppSecopsPortfolioBase
object
5 properties 3 required
AppSecopsProjectListRequest
object
3 properties
AppSecopsSbomDefinitionsFilter
object
4 properties 1 required
ContainerFindingsFiltersSortCriteria
object
2 properties 1 required
AppSecopsSbomDefinitionRequest
AppSecopsSbomVersionFileFormat
object
1 required
AppSecopsSbomComponentsResponse
object
2 properties
BatchRequest
object
1 property
AppSecopsPortfolioRequest
AppSecopsSbomVersionResponse
AppSecopsVulnerabilityFixAvailableDetails
object
2 properties
AppSecopsSbomVulnerabilityComponentDetail
object
2 properties
AppSecopsSbomBuildDifferenceResponse
object
9 properties
AppSecopsApplicationV2BCSDetail
object
6 properties
AppSecopsSbomDefinition
AppSecopsPortfolioBatchResponse
object
1 property
AppSecopsSbomVersion
AppSecopsSbomVersionRiskScore
object
2 properties
AppSecopsSbomBuildDifferenceTrendRequest
AppSecopsSbomVersionRequest
AppSecopsFilterBase
object
3 properties 1 required
AppSecopsApplicationBatchResponse
object
1 property
AppSecopsBCSQuestionsAnswersHistoryResponse
object
2 properties
AppSecopsIngestContainerFindingsRequest
object
3 properties 3 required
AppSecopsProjectSortCriteria
object
2 properties 1 required
AppSecopsSbomVersionDifferenceRequest
object
2 properties 1 required
AppSecopsDashboardInsights
object
1 required
ContainerFindings
object
5 properties 3 required
AppSecopsApplicationFilterBase
AppSecopsPortfolioResponse
ModelError
object
1 property 1 required
AppSecopsOsvVulnerabilityVersionDetail
object
2 properties
AppSecopsSbomDefinitionsSortCriteria
object
2 properties 1 required
KeyValuePair
object
2 properties
AppSecopsExternalReferenceDetail
object
4 properties
AppSecopsSbomVersionMetadataTool
object
4 properties
AppSecopsVulnerabilitySourceDetails
AppSecopsFilter
AppSecopsVulnerabilityVendorComment
object
3 properties
AppSecopsSbomComponent
object
12 properties
AppSecopsSbomComponentFilter
AppSecopsProjectFilterBase
AppSecopsMappedResource
object
8 properties 7 required
AppSecopsOsvVulnerabilityAffectedDetails
object
2 properties
AppSecopsVulnerabilityByComponent
object
8 properties
AppSecopsPortfolioListRequest
object
3 properties
AppSecopsVulnerabilityTrendBySeverityRequest
KnownExploitedVulnerability
object
13 properties
AppSecopsApplicationV2
ObjectIdBatchRequest
object
1 property
AppSecopsDashboardApplicationDetails
AppSecopsSbomVersionDifference
object
7 properties
AppSecopsApplicationV2BCSSelectedItem
object
2 properties 1 required
AppSecopsSbomVersionUpdateRequest
object
2 properties 2 required
AppSecopsBCSQuestionsAnswersHistoryRequest
object
2 properties 1 required
AppSecopsVulnerabilityTrendBySeverity
object
9 properties
AppSecopsOsvVulnerabilityFixDetails
object
4 properties
AppSecopsTopActionableIssuesResponse
object
2 properties
AppSecopsTopActionableIssuesFilter
ListContext
object
3 properties
AppSecopsPortfolioFilter
AppSecopsVulnerabilityByComponentRequest
AppSecopsDashboardRequestBase
object
1 property 1 required
AppSecopsSbomDefinitionBase
object
4 properties 2 required
AppSecopsApplicationResponse
AppSecopsSbomVulnerabilityDetailsByTenant
object
3 properties
AppSecopsVulnerability
object
8 properties
AppSecopsPortfolioHierarchyRequest
AppSecopsSbomComponentProperty
object
2 properties
AppSecopsVulnerabilityPrevalenceRequest
object
2 properties 2 required
ContainerFindingsResponse
AppSecopsApplicationSortCriteria
object
2 properties 1 required
AppSecopsBCSQuestionsAnswerItem
object
2 properties 2 required
AppSecopsProjectBatchResponse
object
1 property
AppSecopsSbomVersionMetadata
object
3 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

corestack-appsecops-api-openapi.yml Raw ↑

Other APIs CoreStack publishes across the network.

CoreStack MCP Server
AE Profile APIs.io
CoreStack Access API
AE Profile APIs.io
CoreStack Account Governance API
AE Profile APIs.io
CoreStack AI Agent API
AE Profile APIs.io
CoreStack AI Governance API
AE Profile APIs.io
CoreStack Application Health API
AE Profile APIs.io
CoreStack Assessment API
AE Profile APIs.io
CoreStack Attachments API
AE Profile APIs.io
CoreStack Audit Log API
AE Profile APIs.io
CoreStack Authorization API
AE Profile APIs.io
CoreStack Automation API
AE Profile APIs.io
CoreStack Automation WorkFlows API
AE Profile APIs.io
#AppSecOps
← Back to C APIs
API Details
ID
corestack:corestack-appsecops-api
Base URL
https://api.corestack.io/
Docs
https://docs.corestack.io/reference
Provider
CoreStack
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=corestack-appsecops-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/corestack-appsecops-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of CoreStack App Sec Ops API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.