Beta module namespace
redteam
Beta routes may change with notice and are NOT covered by the 24-month stable window of the core contract.
Every module route is enumerated with method, path, auth and required permission; request/response schemas are not published for the beta surface.
9 operations
| Method | Path | Required permission | Authentication | Summary |
|---|---|---|---|---|
| get | /v1/m/redteam/catalog | redteam:run:read | Bearer token | Returns the battery taxonomy (metadata + OWASP/ATLAS coverage). |
| get | /v1/m/redteam/runs | redteam:run:read | Bearer token | Lists the tenant's red-team runs (newest selectable by target). |
| post | /v1/m/redteam/runs | redteam:scan:admin | Bearer token | Runs a battery against an AUTHORIZED target and records the scorecard. |
| get | /v1/m/redteam/runs/{id} | redteam:run:read | Bearer token | Returns one run with its per-family breakdown recomputed from the stored result rows (the run row holds the aggregates; the breakdown is derived). |
| get | /v1/m/redteam/runs/{id}/results | redteam:run:read | Bearer token | Lists one run's per-probe results. |
| get | /v1/m/redteam/targets | redteam:target:read | Bearer token | Lists the tenant's registered targets. |
| post | /v1/m/redteam/targets | redteam:target:admin | Bearer token | Registers a client-governed agent as a candidate target. |
| get | /v1/m/redteam/targets/{id} | redteam:target:read | Bearer token | Returns one target. |
| post | /v1/m/redteam/targets/{id}/authorize | redteam:target:admin | Bearer token | Grants or revokes CONSENT to red-team a target. |