Create a repository threat-model version

PUT/v1/security/repositories/{repositoryId}/threat-model

How to call this endpoint

Every ACP API request uses bearer authentication. The examples here show the actual request path, auth header, and body shape that the platform expects.

Path, query, and header parameters

These parameters control which ACP object the endpoint acts on and how the request is processed.

Path parameters
NameLocationTypeRequiredDescription
repositoryIdpathstringYesMonitored security repository ID
Query parameters
None.
Header parameters
NameLocationTypeRequiredDescription
X-Computer-Agents-OrganizationheaderstringNoActive organization context. If omitted, the authenticated user's personal organization is used.

Body schema

Content type: application/json · Required

FieldTypeRequiredDescription
valueobjectYes
value.schemaVersion1Yes
value.summarystringYes
value.entryPointsstring[]Yes
value.untrustedInputsstring[]Yes
value.trustBoundariesstring[]Yes
value.sensitiveDataPathsstring[]Yes
value.privilegedActionsstring[]Yes
value.priorityAreasstring[]Yes
value.exclusionsobject[]Yes
value.exclusions[].pathstringYesWorkspace-relative file path.
value.exclusions[].reasonstringYes
changeSummarystringNo

What the API returns

Each response code below includes the documented payload shape for the ACP API.

200New immutable threat-model versionapplication/json
FieldTypeRequiredDescription
idstringYesUnique identifier.
versionintegerYes
sourcegenerated | user | migrationYes
valueobjectYes
value.schemaVersion1Yes
value.summarystringYes
value.entryPointsstring[]Yes
value.untrustedInputsstring[]Yes
value.trustBoundariesstring[]Yes
value.sensitiveDataPathsstring[]Yes
value.privilegedActionsstring[]Yes
value.priorityAreasstring[]Yes
value.exclusionsobject[]Yes
value.exclusions[].pathstringYesWorkspace-relative file path.
value.exclusions[].reasonstringYes
changeSummarystringYes
createdAtstringYesISO 8601 timestamp.
404Resource not foundapplication/json
FieldTypeRequiredDescription
errorstringNo
Create a repository threat-model version
Loading...
Response 200
Loading...
See the ACP quickstart and SDK flow