### Install a skill

Source: https://docs.corgea.app/cli

Installs a skill from the registry into the specified agent's directory.

```bash
corgea skill install corgea --agent cursor --scope user
```

--------------------------------

### Configure Agent Skill Installation

Source: https://docs.corgea.app/agentic_integrations

Install the skill for a specific agent or set a default agent for future installations.

```bash
corgea skill install corgea --agent cursor --scope user
corgea skill set-default-agent claude-code
```

--------------------------------

### Manually Install Corgea CLI Binaries

Source: https://docs.corgea.app/cli

Download and install the binary for specific platforms manually.

```bash
curl -L https://github.com/Corgea/cli/releases/latest/download/corgea-aarch64-apple-darwin.zip -o corgea.zip && unzip corgea.zip
chmod +x corgea
sudo mv corgea /usr/local/bin
```

```bash
curl -L https://github.com/Corgea/cli/releases/latest/download/corgea-x86_64-apple-darwin.zip -o corgea.zip && unzip corgea.zip
chmod +x corgea
sudo mv corgea /usr/local/bin
```

```bash
curl -L https://github.com/Corgea/cli/releases/latest/download/corgea-x86_64-unknown-linux-gnu.zip -o corgea.zip && unzip corgea.zip
chmod +x corgea
sudo mv corgea /usr/local/bin
```

```bash
curl -L https://github.com/Corgea/cli/releases/latest/download/corgea-aarch64-unknown-linux-gnu.zip -o corgea.zip && unzip corgea.zip
chmod +x corgea
sudo mv corgea /usr/local/bin
```

```bash
# Download the latest Windows build, extract it, and move corgea.exe to a directory on your PATH:
https://github.com/Corgea/cli/releases/latest/download/corgea-x86_64-pc-windows-msvc.zip
```

--------------------------------

### Install a specific skill version

Source: https://docs.corgea.app/cli

Installs a specific version of a skill by appending the version number to the skill name.

```bash
corgea skill install corgea@1.0.0 --agent cursor --scope user
```

--------------------------------

### Pending Skill Version Response Example

Source: https://docs.corgea.app/api-reference/skills/get-skill

Example response body for a skill version currently in pending review status.

```yaml
pending:
  summary: Pending skill version
  value:
    status: ok
    skill:
      id: 550e8400-e29b-41d4-a716-446655440000
      name: secure-review
      slug: secure-review
      description: Review code for security issues.
      status: pending_review
      is_installable: false
      latest_version: 1.0.1
      latest_approved_version: null
      created_at: '2026-06-11T12:00:00+00:00'
      updated_at: '2026-06-11T12:05:00+00:00'
    version:
      id: 8c23448e-f629-47c5-9f56-9f26f7ad3d01
      version: 1.0.1
      status: pending_review
      is_installable: false
      security_concerns: ''
      created_at: '2026-06-11T12:05:00+00:00'
```

--------------------------------

### Install Corgea CLI with npm

Source: https://docs.corgea.app/cli

Installs the CLI globally using the Node.js package manager.

```bash
npm install -g @corgea/cli
```

--------------------------------

### Install Corgea CLI with Homebrew

Source: https://docs.corgea.app/cli

Adds the Corgea tap and installs the CLI on macOS.

```bash
brew tap Corgea/cli
brew install corgea-cli
```

--------------------------------

### Authentication Methods

Source: https://docs.corgea.app/api-reference/introduction

Examples of header-based and path-based authentication requests.

```bash
curl -H "CORGEA-TOKEN: your_api_token_here" \
     https://www.corgea.app/api/v1/verify
```

```bash
curl https://www.corgea.app/api/v1/verify/your_token_here
```

--------------------------------

### Install Corgea CLI

Source: https://docs.corgea.app/upload-report

Install the Corgea CLI package using pip.

```bash
pip install corgea-cli
```

--------------------------------

### Set default agent and install

Source: https://docs.corgea.app/cli

Configures a default agent to avoid specifying it in subsequent install commands.

```bash
corgea skill set-default-agent cursor
corgea skill install corgea --scope user
```

--------------------------------

### Install Corgea Agent Skill via CLI

Source: https://docs.corgea.app/agentic_integrations

Use the Corgea CLI to fetch and install the approved Agent Skill for your configured default agent.

```bash
corgea skill install corgea
```

--------------------------------

### GET /verify

Source: https://docs.corgea.app/api-reference/authentication/verify-token

Verify the API token and optionally return user information.

```APIDOC
## GET /verify

### Description
Verify the API token and optionally return user information.

### Method
GET

### Endpoint
https://www.corgea.app/api/v1/verify

### Parameters
#### Query Parameters
- **user_info** (boolean) - Optional - Whether to include user information in the response (default: false)

### Response
#### Success Response (200)
- **status** (string) - Status of the request
- **user** (object) - User information (only included if user_info=true)

#### Response Example
{
  "status": "ok",
  "user": {
    "id": 123,
    "email": "user@example.com",
    "name": "John Doe",
    "company": {
      "id": 456,
      "name": "Example Corp"
    }
  }
}
```

--------------------------------

### View help

Source: https://docs.corgea.app/cli

Display CLI help information.

```bash
corgea --help
```

--------------------------------

### GET /skills

Source: https://docs.corgea.app/api-reference/skills/list-skills

Retrieve a list of skills in the authenticated user's company. Use the status query parameter to filter for approved, installable skills.

```APIDOC
## GET /skills

### Description
Retrieve skills in the authenticated user's company. Use status=approved to return only skills with an approved, installable version.

### Method
GET

### Endpoint
/skills

### Parameters
#### Query Parameters
- **status** (string) - Optional - When set to approved, only return skills with an approved version.
- **page** (integer) - Optional - The page number for pagination (default: 1)
- **page_size** (integer) - Optional - The number of results per page (default: 20)

### Response
#### Success Response (200)
- **status** (string) - Status of the request
- **page** (integer) - Current page number
- **total_pages** (integer) - Total number of pages
- **total_skills** (integer) - Total number of skills available
- **skills** (array) - List of skill objects

#### Response Example
{
  "status": "ok",
  "page": 1,
  "total_pages": 1,
  "total_skills": 1,
  "skills": [
    {
      "id": "550e8400-e29b-41d4-a716-446655440000",
      "name": "secure-review",
      "slug": "secure-review",
      "description": "Review code for security issues.",
      "status": "approved",
      "is_installable": true,
      "latest_version": "1.0.1",
      "latest_approved_version": "1.0.0",
      "created_at": "2023-01-01T00:00:00Z",
      "updated_at": "2023-01-01T00:00:00Z"
    }
  ]
}
```

--------------------------------

### Configure Instance and Token via Environment Variables

Source: https://docs.corgea.app/cli

Sets both the instance URL and authentication token using environment variables.

```bash
export CORGEA_URL="https://<<Your Instance>>.corgea.app"
export CORGEA_TOKEN="your-token-here"
corgea login
```

```bash
$env:CORGEA_URL="https://<<Your Instance>>.corgea.app"
$env:CORGEA_TOKEN="your-token-here"
corgea login
```

--------------------------------

### Manual Installation for Cursor

Source: https://docs.corgea.app/agentic_integrations

Manually create the skills directory and download the SKILL.md file for Cursor integration.

```bash
mkdir -p ~/.cursor/skills/corgea
```

```bash
curl -o ~/.cursor/skills/corgea/SKILL.md \
  https://raw.githubusercontent.com/Corgea/cli/refs/heads/main/skills/corgea/SKILL.md
```

--------------------------------

### Initialize Dependency Policy

Source: https://docs.corgea.app/cli/deps

Generates a starter .corgea/deps.yml configuration file.

```bash
corgea deps policy init
```

--------------------------------

### Navigate to Repository

Source: https://docs.corgea.app/upload-report

Change the current directory to the target repository.

```bash
cd <<Respository Name>>
```

--------------------------------

### Multi-Ecosystem Project Structure Example

Source: https://docs.corgea.app/sca

Illustrates a typical enterprise application directory layout containing multiple dependency manifest files across different ecosystems.

```text
Enterprise Application:
├── backend/
│   ├── requirements.txt        ✓ Python dependencies
│   ├── pom.xml                 ✓ Java dependencies
│   └── go.mod                  ✓ Go dependencies
├── frontend/
│   ├── package.json            ✓ Node.js dependencies
│   └── package-lock.json       ✓ Lock file
├── mobile/
│   └── Gemfile                 ✓ Ruby dependencies
└── infrastructure/
    └── docker-compose.yml      ✓ Container dependencies
```

--------------------------------

### Install Corgea Skill for GitHub Copilot

Source: https://docs.corgea.app/agentic_integrations

Commands to create the skills directory and download the Corgea skill file for GitHub Copilot in VS Code.

```bash
mkdir -p ~/.copilot/skills/corgea
```

```bash
curl -o ~/.copilot/skills/corgea/SKILL.md \
  https://raw.githubusercontent.com/Corgea/cli/refs/heads/main/skills/corgea/SKILL.md
```

--------------------------------

### Get Skill OpenAPI Definition

Source: https://docs.corgea.app/api-reference/skills/get-skill

The OpenAPI specification for the GET /skills/{slug} endpoint, including parameter definitions and response schemas.

```yaml
openapi: 3.0.0
info:
  title: Corgea API
  version: 1.0.0
  description: >-
    API for interacting with Corgea's scanning and vulnerability management
    features
servers:
  - url: https://www.corgea.app/api/v1
    description: Production server
security:
  - CorgeaToken: []
  - BearerAuth: []
paths:
  /skills/{slug}:
    get:
      tags:
        - Skills
      summary: Get Skill
      description: >-
        Retrieve a single skill by slug. By default, the latest approved version
        is returned when one exists. A specific version can be requested with
        the version query parameter. Version content is included only when the
        selected version is approved.
      operationId: getSkill
      parameters:
        - name: slug
          in: path
          required: true
          schema:
            type: string
          description: The skill slug
        - name: version
          in: query
          required: false
          schema:
            type: string
          description: Specific skill version to retrieve
      responses:
        '200':
          description: Skill retrieved successfully
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: string
                    example: ok
                  skill:
                    $ref: '#/components/schemas/Skill'
                  version:
                    nullable: true
                    allOf:
                      - $ref: '#/components/schemas/SkillVersion'
              examples:
                approved:
                  summary: Approved skill version
                  value:
                    status: ok
                    skill:
                      id: 550e8400-e29b-41d4-a716-446655440000
                      name: secure-review
                      slug: secure-review
                      description: Review code for security issues.
                      status: approved
                      is_installable: true
                      latest_version: 1.0.0
                      latest_approved_version: 1.0.0
                      created_at: '2026-06-11T12:00:00+00:00'
                      updated_at: '2026-06-11T12:00:00+00:00'
                    version:
                      id: 8c23448e-f629-47c5-9f56-9f26f7ad3d01
                      version: 1.0.0
                      status: approved
                      is_installable: true
                      security_concerns: ''
                      created_at: '2026-06-11T12:00:00+00:00'
                      content: |-
                        ---
                        name: secure-review
                        description: Review code for security issues.
                        ---
```

--------------------------------

### OpenAPI Specification for Get Login Attempts

Source: https://docs.corgea.app/api-reference/authentication/get-login-attempts

Defines the GET /auth/logins endpoint, including security requirements, query parameters, and response schemas.

```yaml
openapi: 3.0.0
info:
  title: Corgea API
  version: 1.0.0
  description: >-
    API for interacting with Corgea's scanning and vulnerability management
    features
servers:
  - url: https://www.corgea.app/api/v1
    description: Production server
security:
  - CorgeaToken: []
  - BearerAuth: []
paths:
  /auth/logins:
    get:
      tags:
        - Authentication
      summary: Get Login Attempts
      description: Retrieve successful login attempts for users
      operationId: getAuthLogins
      parameters:
        - name: page
          in: query
          required: false
          schema:
            type: integer
            default: 1
          description: The page number for pagination
        - name: page_size
          in: query
          required: false
          schema:
            type: integer
            default: 20
            maximum: 20
          description: The number of results per page
        - name: from_date
          in: query
          required: false
          schema:
            type: string
            format: date-time
          description: Only include logins after this ISO 8601 timestamp
        - name: to_date
          in: query
          required: false
          schema:
            type: string
            format: date-time
          description: Only include logins before this ISO 8601 timestamp
        - name: search
          in: query
          required: false
          schema:
            type: string
          description: Filter by username
        - name: sort
          in: query
          required: false
          schema:
            type: string
            enum:
              - asc
              - desc
            default: desc
          description: Sort order for results
      responses:
        '200':
          description: Login attempts retrieved successfully
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: string
                    example: ok
                  page:
                    type: integer
                  total_pages:
                    type: integer
                  total_logins:
                    type: integer
                  logins:
                    type: array
                    items:
                      type: object
                      properties:
                        id:
                          type: integer
                        timestamp:
                          type: string
                          format: date-time
                        username:
                          type: string
                        user_id:
                          type: integer
                        user_agent:
                          type: string
                        path:
                          type: string
        '401':
          description: Invalid or missing token
        '403':
          description: Insufficient permissions
components:
  securitySchemes:
    CorgeaToken:
      type: apiKey
      in: header
      name: CORGEA-TOKEN
      description: API key for authentication
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: OAuth2 access token (JWT) in the Authorization header
```

--------------------------------

### Install Corgea Skill for Windsurf

Source: https://docs.corgea.app/agentic_integrations

Commands to create the skills directory and download the Corgea skill file for Windsurf.

```bash
mkdir -p ~/.codeium/windsurf/skills/corgea
```

```bash
curl -o ~/.codeium/windsurf/skills/corgea/SKILL.md \
  https://raw.githubusercontent.com/Corgea/cli/refs/heads/main/skills/corgea/SKILL.md
```

--------------------------------

### Install Corgea Skill for Generic Agents

Source: https://docs.corgea.app/agentic_integrations

Command to download the Corgea skill file for agents supporting the Agent Skills open format.

```bash
curl -o SKILL.md \
  https://raw.githubusercontent.com/Corgea/cli/refs/heads/main/skills/corgea/SKILL.md
```

--------------------------------

### OpenAPI Specification for Get Scans

Source: https://docs.corgea.app/api-reference/scans/get-scans

Defines the GET /scans endpoint, including authentication requirements, optional query parameters for filtering, and the response schema.

```yaml
openapi: 3.0.0
info:
  title: Corgea API
  version: 1.0.0
  description: >-
    API for interacting with Corgea's scanning and vulnerability management
    features
servers:
  - url: https://www.corgea.app/api/v1
    description: Production server
security:
  - CorgeaToken: []
  - BearerAuth: []
paths:
  /scans:
    get:
      tags:
        - Scans
      summary: Get Scans
      description: Retrieves a list of scans for the authenticated user's company
      operationId: getScans
      parameters:
        - name: project
          in: query
          required: false
          schema:
            type: string
          description: Filter scans by project name
        - name: repo
          in: query
          required: false
          schema:
            type: string
          description: Filter scans by repository URL substring
        - name: branch
          in: query
          required: false
          schema:
            type: string
          description: Filter scans by exact branch name
        - name: pull_request_id
          in: query
          required: false
          schema:
            type: string
          description: Filter scans by exact pull request or merge request identifier
        - name: triggered_by
          in: query
          required: false
          schema:
            type: string
          description: >-
            Filter scans by the user who triggered them. Use an email address or
            "current_user".
        - name: scan_type
          in: query
          required: false
          schema:
            type: string
            enum:
              - full
              - partial
          description: >-
            Filter scans by type. Use "full" for full scans or "partial" for
            scans limited to selected files.
        - name: page
          in: query
          required: false
          schema:
            type: integer
            default: 1
          description: The page number for pagination
        - name: page_size
          in: query
          required: false
          schema:
            type: integer
            default: 20
            maximum: 50
          description: The number of results per page
      responses:
        '200':
          description: Scans retrieved successfully
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: string
                    example: ok
                  page:
                    type: integer
                  total_pages:
                    type: integer
                  scans:
                    type: array
                    items:
                      type: object
                      properties:
                        id:
                          type: string
                          format: uuid
                        engine:
                          type: string
                          example: corgea
                        project:
                          type: string
                        created_at:
                          type: string
                          format: date-time
                        repo:
                          type: string
                        branch:
                          type: string
                        status:
                          type: string
                          enum:
                            - completed
                            - in_progress
                            - failed
                        pull_request_id:
                          type: integer
                          nullable: true
        '403':
          description: Permission denied
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: Permission denied
components:
  securitySchemes:
    CorgeaToken:
      type: apiKey
      in: header
      name: CORGEA-TOKEN
      description: API key for authentication
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: OAuth2 access token (JWT) in the Authorization header
```

--------------------------------

### OpenAPI Specification for Get Dependencies

Source: https://docs.corgea.app/api-reference/dependencies/get-dependencies

Defines the GET /dependencies endpoint, including query parameters for filtering by project, repository, branch, and dependency attributes.

```yaml
openapi: 3.0.0
info:
  title: Corgea API
  version: 1.0.0
  description: >-
    API for interacting with Corgea's scanning and vulnerability management
    features
servers:
  - url: https://www.corgea.app/api/v1
    description: Production server
security:
  - CorgeaToken: []
  - BearerAuth: []
paths:
  /dependencies:
    get:
      tags:
        - Dependencies
      summary: Get Dependencies
      description: >-
        Retrieve software dependencies (SBOM) from the latest matching processed
        scan.
      operationId: listDependencies
      parameters:
        - name: project
          in: query
          required: false
          schema:
            type: string
          description: Filter by project name
        - name: repo
          in: query
          required: false
          schema:
            type: string
          description: Filter by repository URL
        - name: branch
          in: query
          required: false
          schema:
            type: string
          description: Filter by branch name
        - name: page
          in: query
          required: false
          schema:
            type: integer
            default: 1
          description: The page number for pagination
        - name: page_size
          in: query
          required: false
          schema:
            type: integer
            default: 20
            maximum: 50
          description: The number of results per page
        - name: name
          in: query
          required: false
          schema:
            type: string
          description: Filter by dependency name (partial match)
          example: django
        - name: version
          in: query
          required: false
          schema:
            type: string
          description: Filter by dependency version
          example: 4.2.0
        - name: type
          in: query
          required: false
          schema:
            type: string
          description: Filter by dependency ecosystem or package type
          example: pypi
        - name: path
          in: query
          required: false
          schema:
            type: string
          description: Filter by file path (partial match)
          example: requirements.txt
        - name: purl
          in: query
          required: false
          schema:
            type: string
          description: Filter by package URL (partial match)
          example: pkg:pypi/django
        - name: license
          in: query
          required: false
          schema:
            type: string
          description: Filter by license
          example: MIT
        - name: dep_type
          in: query
          required: false
          schema:
            type: string
            enum:
              - direct
              - transitive
              - all
            default: all
          description: Filter by dependency relationship type
          example: direct
        - name: search
          in: query
          required: false
          schema:
            type: string
          description: Search across dependency name, version, and package URL
          example: lodash
        - name: sort_by
          in: query
          required: false
          schema:
            type: string
            enum:
              - name
              - '-name'
              - version
              - '-version'
              - type
              - '-type'
              - created_at
              - '-created_at'
          description: Sort results by field (prefix with '-' for descending order)
          example: name
      responses:
        '200':
          description: Get Dependencies retrieved successfully or no project found
          content:
            application/json:
              schema:
                oneOf:
                  - type: object
                    properties:
                      status:
                        type: string
                        example: ok
                      page:
                        type: integer
                      total_pages:
                        type: integer
                      total_dependencies:
                        type: integer
                      dependencies:
                        type: array
                        items:
                          $ref: '#/components/schemas/Dependency'
                  - type: object
                    properties:
                      status:
                        type: string
                        example: no_project_found
        '400':
          description: Invalid dependency type filter
          content:
```

--------------------------------

### OpenAPI Specification for Get SCA Issues

Source: https://docs.corgea.app/api-reference/issues/get-sca-issues

Defines the GET /issues/sca endpoint, including query parameters for filtering by project, severity, package, and reachability status.

```yaml
openapi: 3.0.0
info:
  title: Corgea API
  version: 1.0.0
  description: >-
    API for interacting with Corgea's scanning and vulnerability management
    features
servers:
  - url: https://www.corgea.app/api/v1
    description: Production server
security:
  - CorgeaToken: []
  - BearerAuth: []
paths:
  /issues/sca:
    get:
      tags:
        - Issues
        - SCA
      summary: Get SCA Issues
      description: Retrieve a list of Software Composition Analysis (SCA) issues
      operationId: listScaIssues
      parameters:
        - name: project
          in: query
          required: false
          schema:
            type: string
          description: Filter SCA issues by project name
        - name: repo
          in: query
          required: false
          schema:
            type: string
          description: Filter SCA issues by repository URL
        - name: branch
          in: query
          required: false
          schema:
            type: string
          description: Filter SCA issues by branch name
        - name: page
          in: query
          required: false
          schema:
            type: integer
            default: 1
          description: The page number for pagination
        - name: page_size
          in: query
          required: false
          schema:
            type: integer
            default: 20
            maximum: 50
          description: The number of results per page
        - name: severity
          in: query
          required: false
          schema:
            type: string
          description: >-
            Filter by severity levels (comma-separated). Valid values: CRITICAL,
            HIGH, MEDIUM, LOW
          example: CRITICAL,HIGH
        - name: package
          in: query
          required: false
          schema:
            type: string
          description: Filter by package name (partial match)
          example: lodash
        - name: ecosystem
          in: query
          required: false
          schema:
            type: string
          description: Filter by package ecosystem (case-insensitive)
          example: npm
        - name: cve
          in: query
          required: false
          schema:
            type: string
          description: Filter by CVE identifier (partial match)
          example: CVE-2021
        - name: path
          in: query
          required: false
          schema:
            type: string
          description: Filter by file path (partial match)
          example: package.json
        - name: has_fix
          in: query
          required: false
          schema:
            type: boolean
          description: Filter by whether a fix is available (true/false)
          example: true
        - name: reachability
          in: query
          required: false
          schema:
            type: string
            enum:
              - not_direct_dependency
              - pending
              - vulnerable_usage_reachable
              - vulnerable_usage_unreachable
              - dead_dependency
          description: Filter SCA issues by dependency reachability status
          example: vulnerable_usage_reachable
        - name: include_reachability
          in: query
          required: false
          schema:
            type: boolean
            default: false
          description: >-
            Include dependency reachability status and description for each SCA
            issue.
        - name: sort_by
          in: query
          required: false
          schema:
            type: string
            enum:
              - created_at
              - '-created_at'
              - severity
              - '-severity'
              - package
              - '-package'
              - ecosystem
              - '-ecosystem'
          description: Sort results by field (prefix with '-' for descending order)
          example: '-severity'
      responses:
        '200':
          description: SCA issues retrieved successfully or no project found
          content:
            application/json:
              schema:
                oneOf:
                  - type: object
                    properties:
                      status:
                        type: string
                        example: ok
                      page:
                        type: integer
                      total_pages:
                        type: integer
                      total_issues:
                        type: integer
                      issues:
                        type: array
                        items:
```

--------------------------------

### Run Bare Package Manager Installs

Source: https://docs.corgea.app/cli

These commands trigger security checks based on project configuration files like package.json.

```bash
corgea npm install
corgea yarn install
corgea pnpm install
corgea uv add
```

--------------------------------

### OpenAPI Specification for Get IaC Issues

Source: https://docs.corgea.app/api-reference/issues/get-iac-issues-for-scan

Defines the GET endpoint for retrieving IaC issues, including path parameters, query filters, and response schemas.

```yaml
openapi: 3.0.0
info:
  title: Corgea API
  version: 1.0.0
  description: >-
    API for interacting with Corgea's scanning and vulnerability management
    features
servers:
  - url: https://www.corgea.app/api/v1
    description: Production server
security:
  - CorgeaToken: []
  - BearerAuth: []
paths:
  /scan/{scan_id}/issues/iac:
    get:
      tags:
        - Issues
        - IaC
      summary: Get IaC Issues for Scan
      description: >-
        Retrieve Infrastructure-as-Code (IaC) security issues for a specific
        scan.
      operationId: getScanIacIssues
      parameters:
        - name: scan_id
          in: path
          required: true
          schema:
            type: string
            format: uuid
          description: The ID of the scan
        - name: page
          in: query
          required: false
          schema:
            type: integer
            default: 1
          description: The page number for pagination
        - name: page_size
          in: query
          required: false
          schema:
            type: integer
            default: 20
            maximum: 50
          description: The number of results per page
        - name: severity
          in: query
          required: false
          schema:
            type: string
          description: >-
            Filter by severity levels (comma-separated). Valid values: CRITICAL,
            HIGH, MEDIUM, LOW
          example: CRITICAL,HIGH
        - name: provider
          in: query
          required: false
          schema:
            type: string
          description: Filter by cloud or platform provider
          example: aws
        - name: service
          in: query
          required: false
          schema:
            type: string
          description: Filter by affected service
          example: s3
        - name: iac_type
          in: query
          required: false
          schema:
            type: string
          description: Filter by IaC format
          example: terraform
        - name: rule_id
          in: query
          required: false
          schema:
            type: string
          description: Filter by rule identifier
          example: AVD-AWS-0001
        - name: avd_id
          in: query
          required: false
          schema:
            type: string
          description: Filter by AVD identifier
          example: AVD-AWS-0001
        - name: path
          in: query
          required: false
          schema:
            type: string
          description: Filter by file path (partial match)
          example: infra/main.tf
        - name: search
          in: query
          required: false
          schema:
            type: string
          description: Search across title, description, message, rule ID, and AVD ID
          example: encryption
        - name: sort_by
          in: query
          required: false
          schema:
            type: string
            enum:
              - created_at
              - '-created_at'
              - severity
              - '-severity'
              - provider
              - '-provider'
              - service
              - '-service'
              - path
              - '-path'
          description: Sort results by field (prefix with '-' for descending order)
          example: '-severity'
      responses:
        '200':
          description: Get IaC Issues for Scan retrieved successfully
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: string
                    example: ok
                  page:
                    type: integer
                  total_pages:
                    type: integer
                  total_issues:
                    type: integer
                  issues:
                    type: array
                    items:
                      $ref: '#/components/schemas/IaCIssue'
        '403':
          description: Permission denied
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: Permission denied
        '404':
          description: Scan not found
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: string
                    example: error
                  message:
                    type: string
```

--------------------------------

### GET /policies/{policy_id}

Source: https://docs.corgea.app/api-reference/policies/get-policy

Retrieve a policy by ID.

```APIDOC
## GET /policies/{policy_id}

### Description
Retrieve a policy by ID.

### Method
GET

### Endpoint
https://www.corgea.app/api/v1/policies/{policy_id}

### Parameters
#### Path Parameters
- **policy_id** (integer) - Required - The ID of the policy

### Response
#### Success Response (200)
- **policy** (object) - Policy retrieved successfully

#### Error Responses
- **401** - Invalid or missing token
- **403** - Permission denied or feature unavailable
- **404** - Policy not found
```

--------------------------------

### Point to Single-Tenant Instance

Source: https://docs.corgea.app/cli

Configures the CLI to communicate with a specific single-tenant instance URL.

```bash
corgea login --url https://<<Your Instance>>.corgea.app YOUR_TOKEN
```

--------------------------------

### Install Corgea Skill for OpenAI Codex

Source: https://docs.corgea.app/agentic_integrations

Commands to create the skills directory and download the Corgea skill file for OpenAI Codex.

```bash
mkdir -p ~/.codex/skills/corgea
```

```bash
curl -o ~/.codex/skills/corgea/SKILL.md \
  https://raw.githubusercontent.com/Corgea/cli/refs/heads/main/skills/corgea/SKILL.md
```

--------------------------------

### Configure Corgea for Continue IDE

Source: https://docs.corgea.app/modelcontextprotocol

Add Corgea as a context provider in the Continue configuration file.

```json
{
  "contextProviders": [
    {
      "name": "corgea",
      "params": {
        "serverUrl": "https://www.corgea.app/mcp",
        "headers": {
          "CORGEA-TOKEN": "your_api_token_here"
        }
      }
    }
  ]
}
```

--------------------------------

### GET /authorize

Source: https://docs.corgea.app/api-reference/introduction

Exchanges an authorization code for an API token.

```APIDOC
## GET /authorize

### Description
Exchanges an authorization code received from the user authorization flow for an API token.

### Method
GET

### Endpoint
/authorize

### Parameters
#### Query Parameters
- **code** (string) - Required - The authorization code received from the user.
```

--------------------------------

### List Dependencies Response

Source: https://docs.corgea.app/modelcontextprotocol

Returns a list of discovered project dependencies, including package URL, license information, and direct dependency status.

```json
{
  "status": "ok",
  "page": 1,
  "total_pages": 1,
  "total_dependencies": 1,
  "dependencies": [
    {
      "id": "22222222-2222-2222-2222-222222222222",
      "name": "django",
      "version": "4.2.0",
      "type": "pypi",
      "purl": "pkg:pypi/django@4.2.0",
      "path": "requirements.txt",
      "licenses": ["BSD-3-Clause"],
      "is_direct": true
    }
  ]
}
```

--------------------------------

### GET /auth/logins

Source: https://docs.corgea.app/api-reference/authentication/get-login-attempts

Retrieve successful login attempts for users.

```APIDOC
## GET /auth/logins

### Description
Retrieve successful login attempts for users.

### Method
GET

### Endpoint
/auth/logins

### Parameters
#### Query Parameters
- **page** (integer) - Optional - The page number for pagination (default: 1)
- **page_size** (integer) - Optional - The number of results per page (default: 20, max: 20)
- **from_date** (string) - Optional - Only include logins after this ISO 8601 timestamp
- **to_date** (string) - Optional - Only include logins before this ISO 8601 timestamp
- **search** (string) - Optional - Filter by username
- **sort** (string) - Optional - Sort order for results (asc, desc; default: desc)

### Response
#### Success Response (200)
- **status** (string) - Status message
- **page** (integer) - Current page number
- **total_pages** (integer) - Total number of pages
- **total_logins** (integer) - Total number of logins
- **logins** (array) - List of login objects

#### Response Example
{
  "status": "ok",
  "page": 1,
  "total_pages": 1,
  "total_logins": 1,
  "logins": [
    {
      "id": 1,
      "timestamp": "2023-10-27T10:00:00Z",
      "username": "user1",
      "user_id": 123,
      "user_agent": "Mozilla/5.0",
      "path": "/login"
    }
  ]
}
```

--------------------------------

### GET /verify

Source: https://docs.corgea.app/modelcontextprotocol

Verifies the validity of the provided Corgea API token.

```APIDOC
## GET /verify

### Description
Verifies that the provided Corgea API token is valid and active.

### Method
GET

### Endpoint
/verify

### Headers
- **CORGEA-TOKEN** (string) - Required - The API token generated from your Corgea account settings.
```

--------------------------------

### GET /skills/{slug}

Source: https://docs.corgea.app/api-reference/skills/get-skill

Retrieves the details of a specific skill by its slug.

```APIDOC
## GET /skills/{slug}

### Description
Retrieves the details of a specific skill, including its current status and version information.

### Method
GET

### Endpoint
/skills/{slug}

### Parameters
#### Path Parameters
- **slug** (string) - Required - The unique slug identifier of the skill.

### Response
#### Success Response (200)
- **status** (string) - The status of the request.
- **skill** (object) - The skill object containing id, name, slug, description, status, is_installable, latest_version, latest_approved_version, created_at, and updated_at.
- **version** (object) - The version object containing id, version, status, is_installable, security_concerns, and created_at.

#### Response Example
{
  "status": "ok",
  "skill": {
    "id": "550e8400-e29b-41d4-a716-446655440000",
    "name": "secure-review",
    "slug": "secure-review",
    "description": "Review code for security issues.",
    "status": "pending_review",
    "is_installable": false,
    "latest_version": "1.0.1",
    "latest_approved_version": null,
    "created_at": "2026-06-11T12:00:00+00:00",
    "updated_at": "2026-06-11T12:05:00+00:00"
  },
  "version": {
    "id": "8c23448e-f629-47c5-9f56-9f26f7ad3d01",
    "version": "1.0.1",
    "status": "pending_review",
    "is_installable": false,
    "security_concerns": "",
    "created_at": "2026-06-11T12:05:00+00:00"
  }
}
```

--------------------------------

### Email Address Configuration in Python

Source: https://docs.corgea.app/pii

Shows the transition from hardcoded credentials in configuration objects to using environment variables.

```python
# ❌ Medium Risk - Email in configuration
DATABASE_CONFIG = {
    "host": "db.example.com",
    "user": "admin@company.com",
    "password": "secret123"
}

# ✅ Safe - Environment variables
DATABASE_CONFIG = {
    "host": os.getenv("DB_HOST"),
    "user": os.getenv("DB_USER"),
    "password": os.getenv("DB_PASSWORD")
}
```