/
AN
anchore
/
Anchore Engine API Server
Search skmtc…
⌘K
Sign in
Sign in
APIs
Generators
Stacks
Projects
Docs
History
Schema
Sources
Subscribe
v1
latest
Swagger 2.0
Apache 2.0
2026-07-13
112
149
159.3 KB
Simple status check
get
/
Response
Version check response, returns the api version prefix (e.g. 'v1')
string
required
All 112 operations
get
/
get
/health
get
/version
get
List policies
post
Add a new policy
get
Get specific policy
put
Update policy
delete
Delete policy
get
List all subscriptions
post
Add a subscription of a specific type
get
Get a specific subscription set
put
Update an existing and specific subscription
delete
Delete subscriptions of a specific type
get
List all visible image digests and tags
get
List all visible images
post
Submit a new image for analysis by the engine
delete
Bulk mark images for deletion
post
Import an anchore image tar.gz archive file. This is a deprecated API replaced by the "/imports/images" route
get
Get image metadata
delete
Delete an image analysis
get
Lookup image by docker imageId
delete
Delete image by docker imageId
get
Check policy evaluation status for image
get
Check policy evaluation status for image
get
Get vulnerability types
get
Get vulnerabilities by type
get
Get vulnerability types
get
Get vulnerabilities by type
get
List image content types
get
List image content types
get
Get the content of an image by type
get
Get the content of an image by type files
get
Get the content of an image by type java
get
Get the content of an image by type malware
get
Get the content of an image by type
get
Get the content of an image by type files
get
Get the content of an image by type java
get
Return a list of analyzer artifacts of the specified type
get
Return a list of analyzer artifacts of the specified type
get
Return a list of analyzer artifacts of the specified type
get
List image metadata types
get
Get image sbom in the native Anchore format
get
Get the metadata of an image by type
post
Add repository to watch
get
List configured registries
post
Add a new registry
get
Get a specific registry configuration
put
Update/replace a registry configuration
delete
Delete a registry configuration
get
Service status
get
System status
get
list feeds operations and information
post
trigger feeds operations
put
/system/feeds/{feed}
delete
/system/feeds/{feed}
put
/system/feeds/{feed}/{group}
delete
/system/feeds/{feed}/{group}
get
List system services
get
Get a service configuration and state
get
Get service config for a specific host
delete
Delete the service config
get
Describe the policy language spec implemented by this service.
get
Describe anchore engine error codes.
get
List Event Types
get
List Events
delete
Delete Events
get
Get Event
delete
Delete Event
get
List images vulnerable to the specific vulnerability ID.
get
List of images containing given package
get
Listing information about given vulnerability
get
List user summaries. Only available to the system admin user.
post
Create a new user. Only avaialble to admin user.
get
Get info about an user. Only available to admin user. Uses the main user Id, not a username.
delete
Delete the specified account, only allowed if the account is in the disabled state. All users will be deleted along with the account and all resources will be garbage collected
put
Update the state of an account to either enabled or disabled. For deletion use the DELETE route
get
List accounts for the user
post
Create a new user
get
Get a specific user in the specified account
delete
Delete a specific user credential by username of the credential. Cannot be the credential used to authenticate the request.
get
Get current credential summary
post
add/replace credential
delete
Delete a credential by type
get
List the account for the authenticated user
get
List authenticated user info
get
Get current credential summary
post
add/replace credential
get
/archives
get
/archives/rules
post
/archives/rules
get
/archives/rules/{ruleId}
delete
/archives/rules/{ruleId}
get
/archives/images
post
/archives/images
get
/archives/images/{imageDigest}
delete
/archives/images/{imageDigest}
post
/oauth/token
post
Adds the capabilities to test a webhook delivery for the given notification type
get
Lists in-progress imports
post
Begin the import of an image analyzed by Syft into the system
get
Get detail on a single import
delete
Invalidate operation ID so it can be garbage collected
get
List uploaded package manifests
post
Begin the import of an image analyzed by Syft into the system
get
List uploaded dockerfiles
post
Begin the import of an image analyzed by Syft into the system
get
List uploaded image manifests
post
Import a docker or OCI distribution manifest to associate with the image
get
List uploaded parent manifests (manifest lists for a tag)
post
Import a docker or OCI distribution manifest list to associate with the image
get
List uploaded image configs
post
Import a docker or OCI image config to associate with the image