List vulnerable dependencies
curl --request GET \
--url https://api.coderabbit.ai/v1/security/dependencies \
--header 'x-coderabbitai-api-key: <api-key>'import requests
url = "https://api.coderabbit.ai/v1/security/dependencies"
headers = {"x-coderabbitai-api-key": "<api-key>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {'x-coderabbitai-api-key': '<api-key>'}};
fetch('https://api.coderabbit.ai/v1/security/dependencies', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"items": [
{
"id": "<string>",
"repoId": "<string>",
"repoName": "<string>",
"packageName": "<string>",
"packageVersion": "<string>",
"ecosystem": "<string>",
"lockfilePath": "<string>",
"maxSeverity": "<string>",
"advisorySeverity": "<string>",
"reachabilityStatus": "reachable",
"affected": true,
"advisoryCount": 123,
"state": "<string>",
"detectedAt": "<string>",
"fixGroupId": "<string>",
"fixGroupStatus": "<string>",
"fixGroupPrUrl": "<string>",
"advisories": [
{
"id": "<string>",
"vulnerabilityId": "<string>",
"severity": "<string>",
"cwe": "<string>",
"cveIds": [
"<string>"
],
"summary": "<string>",
"advisoryUrl": "<string>",
"fixedVersion": "<string>",
"reachability": {
"version": 1,
"status": "reachable",
"targets": [
{
"kind": "callable",
"name": "<string>",
"phase": "install",
"status": "reachable",
"source": "osv",
"paths": [
{
"explanation": "<string>",
"steps": [
null
]
}
]
}
],
"limitations": [
"<string>"
]
},
"state": "<string>"
}
],
"fixGroupTaskId": "<string>"
}
],
"total": 123,
"next_cursor": "<string>"
}{
"error": {
"code": "invalid_request",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "unauthenticated",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "forbidden",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "not_found",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "head_changed",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "precondition_failed",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "payload_too_large",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "rate_limit_exceeded",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "internal_error",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "unavailable",
"message": "<string>",
"retry_after": 1
}
}List vulnerable dependencies
Lists dependencies with known vulnerabilities, up to 100 per page. Filter by repository, scan, state, reachability or search text. Follow next_cursor with the same filters.
GET
/
v1
/
security
/
dependencies
List vulnerable dependencies
curl --request GET \
--url https://api.coderabbit.ai/v1/security/dependencies \
--header 'x-coderabbitai-api-key: <api-key>'import requests
url = "https://api.coderabbit.ai/v1/security/dependencies"
headers = {"x-coderabbitai-api-key": "<api-key>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {'x-coderabbitai-api-key': '<api-key>'}};
fetch('https://api.coderabbit.ai/v1/security/dependencies', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"items": [
{
"id": "<string>",
"repoId": "<string>",
"repoName": "<string>",
"packageName": "<string>",
"packageVersion": "<string>",
"ecosystem": "<string>",
"lockfilePath": "<string>",
"maxSeverity": "<string>",
"advisorySeverity": "<string>",
"reachabilityStatus": "reachable",
"affected": true,
"advisoryCount": 123,
"state": "<string>",
"detectedAt": "<string>",
"fixGroupId": "<string>",
"fixGroupStatus": "<string>",
"fixGroupPrUrl": "<string>",
"advisories": [
{
"id": "<string>",
"vulnerabilityId": "<string>",
"severity": "<string>",
"cwe": "<string>",
"cveIds": [
"<string>"
],
"summary": "<string>",
"advisoryUrl": "<string>",
"fixedVersion": "<string>",
"reachability": {
"version": 1,
"status": "reachable",
"targets": [
{
"kind": "callable",
"name": "<string>",
"phase": "install",
"status": "reachable",
"source": "osv",
"paths": [
{
"explanation": "<string>",
"steps": [
null
]
}
]
}
],
"limitations": [
"<string>"
]
},
"state": "<string>"
}
],
"fixGroupTaskId": "<string>"
}
],
"total": 123,
"next_cursor": "<string>"
}{
"error": {
"code": "invalid_request",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "unauthenticated",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "forbidden",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "not_found",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "head_changed",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "precondition_failed",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "payload_too_large",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "rate_limit_exceeded",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "internal_error",
"message": "<string>",
"retry_after": 1
}
}{
"error": {
"code": "unavailable",
"message": "<string>",
"retry_after": 1
}
}- CLI Tool
- MCP Server
coderabbit api request /security/dependencies
An agent connected to the CodeRabbit MCP server runs this operation as the
list_security_dependencies tool. The connection selects the organization, so the arguments have no org_id or org_name.{
"method": "tools/call",
"params": {
"name": "list_security_dependencies",
"arguments": {}
}
}
Authorizations
See Authentication for the key types and where to create a key.
Query Parameters
Organization for a workspace key: the Git-provider organization ID (scope.provider_organization_id) or the CodeRabbit organization ID (scope.id, or id from list organizations). Supply either org_id or org_name, never both. Omit for organization keys and MCP connections.
Minimum string length:
1Was this page helpful?