API Reference

Integrate SentinelNexus security intelligence directly into your CI/CD pipelines and developer workflows.

Production Base URL

https://sentinelnexus-backend.onrender.com/api/v1

All endpoints except webhooks require a Bearer JWT token from Clerk. In the browser, this is handled automatically via session cookies.

Standard tier allows 100 requests per minute per user. Enterprise users can request higher limits via support.

WEBHOOK/auth/clerk/webhookAuth: Public (Svix Header Required)

Clerk User Sync Webhook. Hardened with Svix signature verification.

GET/users/meAuth: Clerk JWT

Retrieve current authenticated user profile and session data.

POST/scansAuth: Clerk JWT

Initialize a new security scan. Supports 'code', 'prompt', and 'text' types.

{ "content": "...", "scan_type": "code", "project_id": "..." }

GET/scans/:idAuth: Clerk JWT

Get detailed results, CVSS scores, and findings for a specific scan.

GET/projectsAuth: Clerk JWT

List all active security projects for the current workspace.

POST/projectsAuth: Clerk JWT

Create a new project container for grouped vulnerability tracking.

{ "name": "API v2", "description": "..." }

POST/reports/generate/:scan_idAuth: Clerk JWT

Generate a comprehensive PDF security report with CWE mappings.

GET/dashboard/statsAuth: Clerk JWT

Aggregation data for risk heatmaps and severity distribution.

Our engineering team can help you build custom security scanners for proprietary codebases or specific compliance requirements.