List resources
curl --request GET \
--url https://aquila.attaxr.com/api/vulnerabilities \
--cookie better-auth.session_token=const options = {method: 'GET', headers: {cookie: 'better-auth.session_token='}};
fetch('https://aquila.attaxr.com/api/vulnerabilities', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://aquila.attaxr.com/api/vulnerabilities"
headers = {"cookie": "better-auth.session_token="}
response = requests.get(url, headers=headers)
print(response.text){
"items": [
{
"id": "<string>",
"userId": "<string>",
"title": "<string>",
"severity": "medium",
"status": "open",
"description": "",
"metadata": {},
"createdAt": "<unknown>",
"updatedAt": "<unknown>",
"leadId": "<string>",
"scanId": "<string>",
"target": "<string>",
"dedupKey": "<string>",
"score": 50,
"category": "<string>",
"featureCategory": "admin",
"proofOfConcept": "<string>",
"stepsToReproduce": "<string>",
"impact": "<string>",
"remediation": "<string>",
"attackScenarioMermaid": "<string>",
"chainRefs": [
{
"kind": "lead",
"id": "<string>",
"label": "<string>",
"note": "<string>"
}
],
"references": [
{
"title": "<string>",
"url": "<string>"
}
],
"evidence": [
{
"label": "<string>",
"detail": "<string>"
}
],
"methodology": "<string>",
"toolName": "<string>",
"confirmedAt": "<unknown>"
}
],
"total": 123,
"page": 123,
"limit": 123,
"totalPages": 123
}{
"error": "<string>"
}{
"error": "<string>"
}Vulnerabilities
List resources
Paginated, owner-scoped listing. Newest first by default. ?q= searches title (case-insensitive contains).
GET
/
api
/
vulnerabilities
List resources
curl --request GET \
--url https://aquila.attaxr.com/api/vulnerabilities \
--cookie better-auth.session_token=const options = {method: 'GET', headers: {cookie: 'better-auth.session_token='}};
fetch('https://aquila.attaxr.com/api/vulnerabilities', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://aquila.attaxr.com/api/vulnerabilities"
headers = {"cookie": "better-auth.session_token="}
response = requests.get(url, headers=headers)
print(response.text){
"items": [
{
"id": "<string>",
"userId": "<string>",
"title": "<string>",
"severity": "medium",
"status": "open",
"description": "",
"metadata": {},
"createdAt": "<unknown>",
"updatedAt": "<unknown>",
"leadId": "<string>",
"scanId": "<string>",
"target": "<string>",
"dedupKey": "<string>",
"score": 50,
"category": "<string>",
"featureCategory": "admin",
"proofOfConcept": "<string>",
"stepsToReproduce": "<string>",
"impact": "<string>",
"remediation": "<string>",
"attackScenarioMermaid": "<string>",
"chainRefs": [
{
"kind": "lead",
"id": "<string>",
"label": "<string>",
"note": "<string>"
}
],
"references": [
{
"title": "<string>",
"url": "<string>"
}
],
"evidence": [
{
"label": "<string>",
"detail": "<string>"
}
],
"methodology": "<string>",
"toolName": "<string>",
"confirmedAt": "<unknown>"
}
],
"total": 123,
"page": 123,
"limit": 123,
"totalPages": 123
}{
"error": "<string>"
}{
"error": "<string>"
}Authorizations
apiKeyCookieapiKeyHeaderbearerAuth
Browser session cookie set by Better Auth sign-in.
Query Parameters
Case-insensitive contains search.
Page number, 1-based.
Items per page (1-100, default 20).
Sort column (allowlisted).
Available options:
createdAt, updatedAt Sort direction (default desc).
Available options:
asc, desc 
