Skip to content

Security.RunDevelopers

v1 PreviewOpenAPI ↗

API & MCP reference/List tools

HTTP REFERENCE

List tools

Search and paginate the live catalog. Only executable tools appear by default; include unavailable entries explicitly to inspect their readiness.

View as Markdown ↗

GET/v1/tools

Find a tool for the job

Search with query or category, then follow next_offset to read more results. Open the matching tool before constructing an invocation.

What to do next

Use include_unavailable=true when diagnosing a missing tool; normal discovery lists only executable tools.

Read the step-by-step guide →

Parameter and response reference

Parameters

queryquery · string

categoryquery · string | null

include_unavailablequery · boolean

offsetquery · integer

limitquery · integer

authorizationheader · string | nullrequired

Responses

200 Successful Response
422 Validation Error

Copyable examples · your API endpoint

Request

curl -X GET "$SECURITY_RUN_URL/v1/tools?query=yara&limit=20" \
  -H "Authorization: Bearer $SECURITY_RUN_API_KEY"

Request

import os, httpx

headers = {}
headers["Authorization"] = "Bearer " + os.environ["SECURITY_RUN_API_KEY"]
response = httpx.request('GET', os.environ["SECURITY_RUN_URL"].rstrip("/") + '/v1/tools?query=yara&limit=20',
    headers=headers)
response.raise_for_status()
print(response.text)

Request

const base = process.env.SECURITY_RUN_URL.replace(/\/$/, "");
const headers = {};
headers.Authorization = `Bearer ${process.env.SECURITY_RUN_API_KEY}`;
const response = await fetch(base + "/v1/tools?query=yara&limit=20", {
  method: "GET",
  headers
});
if (!response.ok) throw new Error(`HTTP ${response.status}`);
console.log(await response.text());