CentralCSP
APITechnologies

List technologies

Lists the libraries detected on the website, one row per library version, with its lifecycle status, how many known vulnerabilities affect it and the highest severity among them. A library appears a short while after a script carrying it is first reported.

Requires the viewer role on the website and the sbom plan feature.

GET
/v1/workspaces/{workspaceId}/websites/{websiteId}/technologies

Authorization

headerAuthorizationBearer <JWT>

An OpenID Connect access token from signing in to CentralCSP, acting as the signed-in user.

Path Parameters

workspaceId*string

The workspace's id.

websiteId*string

The website's id.

Query Parameters

cursor?string

The nextCursor of the previous page. Omit it to start from the beginning. A cursor encodes a position and is not meant to be built by hand.

limit*|

How many items to return, from 1 to 200.

Range1 <= value <= 200
Default50
q?string

Match part of the library name.

Lengthlength <= 255
status?string

Comma-separated version statuses to keep: good, outdated, dormant, superseded, deprecated or not_found (rows shown as unknown). Unrecognized values are ignored.

Lengthlength <= 128
vulnerable?boolean

Only vulnerable, or only clean, technologies.

minSeverity?string

Only technologies whose highest severity is at least this.

Value in"low""medium""high""critical"
fixAvailable?boolean

true keeps the vulnerable technologies that have an upgradeTo version, which no known advisory affects. false keeps the vulnerable ones that have none. Clean technologies are left out either way.

sort?string

What to order rows by. lastSeen is the default, the technologies seen most recently first. risk is the order of the public tech checker: vulnerable versions first, most severe first; then the other versions from the most urgent status (deprecated, superseded, outdated, dormant) to good; then the rows whose version is not known, ranked the same way. severity ranks by the highest severity, then by whether the row is vulnerable at all. status ranks by how much the version needs attention, from up to date through to deprecated. Rows that tie are ordered by name.

Value in"risk""severity""name""firstSeen""lastSeen""cveCount""status"
order?string

Which direction to read sort in. Left out, name runs A to Z and every other sort leads with the rows that need attention first.

Value in"asc""desc"

Response Body

A page of technologies.

application/json
  1. response
data*array<>

The technologies on this page.

pagination*

Where this page sits in the full result set.

Example Request
curl -X GET 'https://api.centralcsp.com/v1/workspaces/01936b7a-6f2e-7c31-9a4d-2f8e1c5b7d90/websites/01936b7a-6f2e-7c31-9a4d-2f8e1c5b7d90/technologies?limit=50'
Example Response
{  "data": [    {      "key": "eyJwIjoianF1ZXJ5IiwidiI6IjMuNS4xIn0",      "productKey": "jquery",      "name": "jQuery",      "version": "3.5.1",      "versionStatus": "good",      "vulnerable": true,      "cveCount": 2,      "maxSeverity": "low",      "scripts": 1,      "iconUrl": "https://cdn.centralcsp.com/icons/jquery.svg",      "productHomePage": "https://jquery.com",      "releaseName": "3.x",      "latestVersion": "3.7.1",      "currentLineLatest": "4.0.0",      "productLatest": "4.0.0",      "upgradeTo": "3.7.1",      "upgradeReason": "fixed",      "firstSeen": "2019-08-24T14:15:22Z",      "lastSeen": "2019-08-24T14:15:22Z"    }  ],  "pagination": {    "nextCursor": "string",    "hasMore": true,    "total": 0  }}

Analyze a policy value POST

Reviews a Content-Security-Policy header value and reports what each directive does and where the policy is weak, such as an unsafe keyword or an overly broad...

Get the technologies summary GET

Returns how many library versions are detected on the website, how many are vulnerable, and their breakdown by severity and lifecycle status.