REST API
A read-only public API for querying facts programmatically.
- No authentication. Rate limit: 60 requests per minute per IP.
- All timestamps UTC, all responses JSON.
- The canonical spec is the API itself: open https://ratatosk.io/v1 for a self-describing index with every endpoint, parameter, and example.
Endpoints
| Path | Purpose |
|---|---|
GET /v1 |
Self-describing index (the canonical reference) |
GET /v1/facts |
Incremental fact feed. Filters: project type severity since limit |
GET /v1/facts/by-entity |
Reverse index: every fact touching one identifier (CVE, CRD, flag, …) |
GET /v1/releases/{project}/{version} |
One full release review. include=raw adds the original note |
Examples
The five most recent critical facts:
curl "https://ratatosk.io/v1/facts?severity=critical&limit=5"
Every fact touching one CVE:
curl "https://ratatosk.io/v1/facts/by-entity?name=CVE-2026-33186"
One release, original note included:
curl "https://ratatosk.io/v1/releases/thanos/v0.42.0?include=raw"
Incremental polling
/v1/facts is ordered by ascending fact_id. Pass the response's
next_since as since on your next request to receive only new facts.
Use this cursor instead of refetching everything on a schedule.
Terms
Analyses are AI-generated and provided without warranty. A source reference for verification always comes along. See the terms of use.