Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
214 of your 317 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.
Upstream (GitHub) caused delay on this scan — not Repobility.
  • GitHub API rate-limited (HTTP 403) — preflight skipped, fell back to direct git clone.
  • Clone from GitHub took 30.94s for a 57.7 MB repo slow.
  • Repobility's analysis ran in 16.41s after the clone landed.

Hello-QM/catgo-LRG

https://github.com/Hello-QM/catgo-LRG · scanned 2026-06-05 14:56 UTC (5 days, 3 hours ago) · 10 languages

1933 raw signals (297 security + 1636 graph) 11/13 scanners ran 83rd percentile · Typescript · huge (>500K LoC) System graph score 59 (higher by 32)

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 3 hours ago · v2 · 870 actionable findings from 2 signal sources. 223 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 85.0 0.15 12.75
security_score 100.0 0.25 25.00
testing_score 100.0 0.20 20.00
documentation_score 94.0 0.15 14.10
practices_score 94.0 0.15 14.10
code_quality 45.0 0.10 4.50
Overall 1.00 90.5
security_score may be inflated — optional security scanners were skipped on this fast scan
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Strongest structure (81), documentation (80); weakest code quality (56), practices (62). Most common pattern: dart-print.

Showing 654 of 870 actionable findings. 1093 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high Security checks quality Quality conf 1.00 ✓ Repobility 22 occurrences [MINED107] Missing import: `struct` used but not imported: The file uses `struct.something(...)` but never imports `struct`. This raises NameError at runtime the first time the line executes.
Add `import struct` at the top of the file.
12 files, 16 locations
server/catgo/routers/workflow.py:1246, 2400, 3090 (3 hits)
server/catgo/mcp_tools/workflow_tools.py:869, 1033 (2 hits)
server/catgo/routers/view_capture.py:345, 803 (2 hits)
server/catgo/mcp_tools/helpers.py:91
server/catgo/mcp_tools/server_claude_code.py:1070
server/catgo/routers/forcefield_utils.py:1106
server/catgo/routers/heterostructure.py:313
server/catgo/routers/structure_ops.py:286
critical System graph security Secrets conf 1.00 Possible secret in server/catgo/models/hpc.py
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
server/catgo/models/hpc.py:27
critical System graph security Secrets conf 1.00 Possible secret in src-tauri/src/ssh/auth.rs
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
src-tauri/src/ssh/auth.rs:34
critical System graph security Secrets conf 1.00 Possible secret in src/lib/api/transport/index.ts
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
src/lib/api/transport/index.ts:45
low Security checks quality Quality conf 1.00 ✓ Repobility [MINED012] Curl Pipe Bash: curl ... | sh / bash — runs unverified network code.
Review and fix per the pattern semantics. See CWE-494 / A08:2021 for context.
scripts/setup.mjs:81
low Security checks quality Quality conf 1.00 ✓ Repobility [MINED012] Curl Pipe Bash: curl ... | sh / bash — runs unverified network code.
Review and fix per the pattern semantics. See CWE-494 / A08:2021 for context.
scripts/agent-dev.mjs:42
high Security checks quality Quality conf 1.00 ✓ Repobility [MINED021] Path Traversal Os Join: os.path.join(user_dir, filename) where filename can contain "../" — directory escape.
Review and fix per the pattern semantics. See CWE-22 / A01:2021 for context.
server/plugin_loader.py:17
high Security checks quality Quality conf 1.00 ✓ Repobility [MINED034] Python Subprocess Shell True: subprocess(..., shell=True) enables command injection.
Review and fix per the pattern semantics. See CWE-78 / for context.
server/workflow/engines/sella.py:103
high Security checks quality Quality conf 1.00 ✓ Repobility 3 occurrences [MINED108] `self.is_total` used but never assigned in __init__: Method `label` of class `ICOHPEntry` reads `self.is_total`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance.
Initialize `self.is_total = <default>` in __init__, or add a class-level default.
3 files, 3 locations
extensions/cohp-analysis/catgo_cohp/io.py:189
server/main.py:452
server/workflow/engine_runtime.py:165
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI DELETE /{plugin_name} has no auth: Handler `uninstall_plugin` is registered with router/app.delete(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/plugins.py:550
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI DELETE /{workflow_id} has no auth: Handler `api_delete_workflow` is registered with router/app.delete(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/workflow.py:388
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST / has no auth: Handler `api_create_workflow` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/workflow.py:191
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /analyzers/{analyzer_id}/run has no auth: Handler `run_analyzer` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/plugins.py:432
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /engine-defs/custom has no auth: Handler `create_custom_engine` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/workflow.py:336
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /from-template/{template_id} has no auth: Handler `api_create_from_template` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/workflow.py:305
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /generate has no auth: Handler `generate_vasp_inputs_endpoint` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/vasp.py:130
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /import-flow has no auth: Handler `import_flow` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/quacc.py:55
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /import-flow has no auth: Handler `import_flow` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/atomate2.py:24
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /install/upload has no auth: Handler `install_plugin_upload` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/plugins.py:563
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /parse-structure has no auth: Handler `parse_structure` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/vasp.py:67
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /pending-update has no auth: Handler `push_pending_workflow_update` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/workflow.py:165
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /quickbuild has no auth: Handler `api_quickbuild` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/workflow.py:238
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /readers/upload has no auth: Handler `upload_to_reader` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/plugins.py:206
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /refresh has no auth: Handler `refresh_plugins` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/plugins.py:604
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /report/upload has no auth: Handler `upload_report_file` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/vasp.py:192
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /report/upload-text has no auth: Handler `upload_report_text` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/vasp.py:224
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /upload has no auth: Handler `trajectory_upload` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/trajectory_stream.py:580
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /{plugin_name}/disable has no auth: Handler `disable_plugin` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/plugins.py:525
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /{plugin_name}/enable has no auth: Handler `enable_plugin` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/plugins.py:500
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /{workflow_id}/recheck-jobs has no auth: Handler `api_recheck_jobs` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/workflow.py:469
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /{workflow_id}/reset has no auth: Handler `api_reset_workflow` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/workflow.py:435
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI POST /{workflow_id}/steps/{step_id}/retry has no auth: Handler `api_retry_step` is registered with router/app.post(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/workflow.py:418
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI PUT /{workflow_id} has no auth: Handler `api_update_workflow` is registered with router/app.put(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/workflow.py:371
high Security checks quality Quality conf 0.80 ✓ Repobility [MINED112] FastAPI PUT /{workflow_id}/steps/{step_id} has no auth: Handler `api_update_step` is registered with router/app.put(...) but no Depends/Security parameter is declared and no auth marker appears in the function body.
Add Depends(get_current_user) or Security(...) to the handler signature. If the route is truly public, document it with a code comment so the rule knows it's intentional.
server/catgo/routers/workflow.py:397
high Security checks software dependencies conf 0.90 ✓ Repobility 4 occurrences [MINED118] Dockerfile FROM `node:20-bookworm-slim` not pinned by digest: `FROM node:20-bookworm-slim` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every build is potentially different. Production images should pin to `image@sha256:...` for reproducibility + supply-chain integrity.
Replace with: `FROM node:20-bookworm-slim@sha256:<digest>`. Get the digest from `docker manifest inspect`. Re-pin via a scheduled bot (Renovate, Dependabot).
2 files, 4 locations
Dockerfile:14, 70 (2 hits)
deploy/hpc/Dockerfile:12, 43 (2 hits)
high Security checks software dependencies conf 0.90 ✓ Repobility [MINED122] package.json dep `@catgo/ferrox-wasm` pulled from URL/Git: `dependencies.@catgo/ferrox-wasm` = `link:extensions/rust-wasm` bypasses the npm registry. No integrity hash, no version locking, no registry-side scanning. If the URL or git host is compromised, every `npm install` pulls the new payload.
Publish the dependency to npm (or your private registry) and reference it by `^x.y.z`. If that's not possible, lock by commit SHA: `git+https://...#<full-sha>` AND verify the SHA in CI.
package.json:1
high Security checks software dependencies conf 0.90 ✓ Repobility 4 occurrences [MINED131] pre-commit hook `https://github.com/pre-commit/pre-commit-hooks` pinned to mutable rev `v6.0.0`: `.pre-commit-config.yaml` references `https://github.com/pre-commit/pre-commit-hooks` at `rev: v6.0.0`. If `{rev}` is a branch or version tag, the repo owner can push new code there and `pre-commit install --install-hooks` will fetch it on every developer's machine.
Pin to a commit SHA: `rev: <40-char-sha>` and bump it through `pre-commit autoupdate` (which writes to PRs that are reviewed).
lines 6, 33, 42, 57
.pre-commit-config.yaml:6, 33, 42, 57 (4 hits)
high Security checks security path traversal conf 0.80 [SEC013] Path Traversal — User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files.
Use os.path.realpath() and verify the path starts with your expected base directory. Use secure_filename() for uploads.
server/workflow/engines/sella.py:215
low Security checks security Injection conf 1.00 3 occurrences [SEC103] LDAP injection — non-constant search filter: User input concatenated into an LDAP search filter. Attackers inject `*)(uid=*` style payloads to bypass auth or enumerate accounts.
Escape with javax.naming.ldap.Rdn.escapeValue or equivalent. For python-ldap, use ldap.filter.escape_filter_chars. Better: use parameterized search APIs (Spring LdapTemplate filter encoders).
3 files, 3 locations
plugins/cp2k-dos-reader/plugin.py:196
plugins/cp2k-dos-reader/tool.py:200
scripts/parse_gaussian.py:46
high Security checks cicd CI/CD security conf 0.92 Dockerfile pipes a remote script into a shell
Download the artifact, verify its checksum or signature, pin the version, and then execute it.
Dockerfile:29 CI/CD securitycontainers
high Security checks security auth conf 0.83 4 occurrences Secret-like setting is echoed into a password input value
Never prefill secret fields with stored values. Show a masked status such as configured/not configured, require explicit rotation to replace the value, and return the raw key only once at creation time.
4 files, 4 locations
src/lib/ConnectDialog.svelte:466
src/lib/chat/ChatPane.svelte:1207
src/lib/mobile/MobileConnect.svelte:445
src/lib/structure/ServerPane.svelte:1492
high System graph api Wiring conf 1.00 Dangling fetch: GET /__db/read?path=${encodeURIComponent(db_path)} (src/lib/api/db-wasm.ts:27)
`src/lib/api/db-wasm.ts:27` calls `GET /__db/read?path=${encodeURIComponent(db_path)}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/__db/read` If this points at an external API, prefix it with `https://` so the ma…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /__files/raw?path=${encodeURIComponent(path)} (desktop/sidebar/fs-browser.svelte.ts:102)
`desktop/sidebar/fs-browser.svelte.ts:102` calls `GET /__files/raw?path=${encodeURIComponent(path)}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/__files/raw` If this points at an external API, prefix it with `htt…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /__files/read?path=${encodeURIComponent(path)} (src/lib/api/db-wasm.ts:468)
`src/lib/api/db-wasm.ts:468` calls `GET /__files/read?path=${encodeURIComponent(path)}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/__files/read` If this points at an external API, prefix it with `https://` so th…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/pty/shells (src/lib/api/pty.ts:55)
`src/lib/api/pty.ts:55` calls `GET /api/pty/shells` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/pty/shells` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET https://providers.optimade.org/v1/links (extensions/vscode/src/optimade-backend.ts:90)
`extensions/vscode/src/optimade-backend.ts:90` calls `GET https://providers.optimade.org/v1/links` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/providers.optimade.org/v1/links` If this points at an external…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /__db/copy?src=${encodeURIComponent(db_path)}&dst=${encodeURIComponent(path)} (src/lib/api/db-wasm.ts:444)
`src/lib/api/db-wasm.ts:444` calls `POST /__db/copy?src=${encodeURIComponent(db_path)}&dst=${encodeURIComponent(path)}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/__db/copy` If this points at an external API, pr…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /__db/write?path=${encodeURIComponent(db_path)} (src/lib/api/db-wasm.ts:205)
`src/lib/api/db-wasm.ts:205` calls `POST /__db/write?path=${encodeURIComponent(db_path)}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/__db/write` If this points at an external API, prefix it with `https://` so th…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /__files/write (src/lib/api/db-wasm.ts:477)
`src/lib/api/db-wasm.ts:477` calls `POST /__files/write` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/__files/write` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.openai.com/v1/audio/transcriptions (src/lib/gesture/whisper-voice-engine.ts:110)
`src/lib/gesture/whisper-voice-engine.ts:110` calls `POST https://api.openai.com/v1/audio/transcriptions` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.openai.com/v1/audio/transcriptions` If this points …
Dangling fetchFetch
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_project` without auth dependency — server/catgo/routers/workflow.py:2805
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2805 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_result` without auth dependency — server/catgo/routers/workflow.py:1420
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:1420 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_delete_workflow` without auth dependency — server/catgo/routers/workflow.py:387
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:387 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `api_unassign_workflow_from_project` without auth dependency — server/catgo/routers/workflow.py:2824
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2824 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `cancel_job` without auth dependency — server/catgo/routers/hpc.py:427
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:427 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `cancel_lammps_job` without auth dependency — server/catgo/routers/lammps/simulation.py:585
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/lammps/simulation.py:585 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `catgo_tunnel_teardown` without auth dependency — server/catgo/routers/hpc.py:1449
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:1449 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `cleanup_band_session` without auth dependency — server/catgo/routers/bands.py:463
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/bands.py:463 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `cleanup_session` without auth dependency — server/catgo/routers/cohp.py:322
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/cohp.py:322 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `cleanup_session` without auth dependency — server/catgo/routers/dos.py:524
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/dos.py:524 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `cleanup_session` without auth dependency — server/catgo/routers/paper.py:260
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/paper.py:260 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_tool_endpoint` without auth dependency — server/catgo/routers/tools.py:175
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/tools.py:175 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `disconnect` without auth dependency — server/catgo/routers/hpc.py:306
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:306 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `remove_profile` without auth dependency — server/catgo/routers/hpc.py:331
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:331 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `unassign_project` without auth dependency — server/catgo/routers/workflow_engine.py:177
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow_engine.py:177 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `uninstall_plugin` without auth dependency — server/catgo/routers/hub.py:251
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hub.py:251 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `uninstall_plugin` without auth dependency — server/catgo/routers/plugins.py:549
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/plugins.py:549 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_atom` without auth dependency — server/catgo/routers/structure_ops.py:221
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/structure_ops.py:221 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_atoms` without auth dependency — server/catgo/routers/structure_ops.py:245
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/structure_ops.py:245 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_water_layer` without auth dependency — server/catgo/routers/water_layer.py:612
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/water_layer.py:612 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_water_molecules` without auth dependency — server/catgo/routers/structure_ops.py:464
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/structure_ops.py:464 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_batch_retry` without auth dependency — server/catgo/routers/workflow.py:644
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:644 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_calculate_gibbs` without auth dependency — server/catgo/routers/workflow.py:1874
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:1874 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_co2rr` without auth dependency — server/catgo/routers/workflow.py:506
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:506 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_create_from_template` without auth dependency — server/catgo/routers/workflow.py:304
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:304 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_create_project` without auth dependency — server/catgo/routers/workflow.py:2757
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2757 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_create_workflow` without auth dependency — server/catgo/routers/workflow.py:190
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:190 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_descriptors` without auth dependency — server/catgo/routers/workflow.py:548
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:548 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_energy_diagram` without auth dependency — server/catgo/routers/workflow.py:536
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:536 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_export_structure` without auth dependency — server/catgo/routers/workflow.py:2562
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2562 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_files_copy` without auth dependency — server/catgo/routers/hpc.py:1597
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:1597 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_files_copy` without auth dependency — server/catgo/routers/workflow.py:2718
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2718 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_files_delete` without auth dependency — server/catgo/routers/hpc.py:1553
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:1553 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_files_delete` without auth dependency — server/catgo/routers/workflow.py:2682
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2682 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_files_mkdir` without auth dependency — server/catgo/routers/hpc.py:1532
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:1532 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_files_mkdir` without auth dependency — server/catgo/routers/workflow.py:2669
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2669 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_files_move` without auth dependency — server/catgo/routers/hpc.py:1619
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:1619 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_files_move` without auth dependency — server/catgo/routers/workflow.py:2738
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2738 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_files_rename` without auth dependency — server/catgo/routers/hpc.py:1575
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:1575 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_files_rename` without auth dependency — server/catgo/routers/workflow.py:2701
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2701 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_free_energy` without auth dependency — server/catgo/routers/workflow.py:525
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:525 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_new_db` without auth dependency — server/catgo/routers/workflow.py:2429
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2429 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_nrr` without auth dependency — server/catgo/routers/workflow.py:516
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:516 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_oer_overpotential` without auth dependency — server/catgo/routers/workflow.py:496
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:496 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_open_db` without auth dependency — server/catgo/routers/workflow.py:2447
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2447 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_pause_workflow` without auth dependency — server/catgo/routers/workflow.py:1073
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:1073 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_preview_input` without auth dependency — server/catgo/routers/workflow.py:2834
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2834 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_quickbuild` without auth dependency — server/catgo/routers/workflow.py:237
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:237 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_recheck_jobs` without auth dependency — server/catgo/routers/workflow.py:468
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:468 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_reconcile_from_hpc` without auth dependency — server/catgo/routers/workflow.py:880
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:880 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_reset_workflow` without auth dependency — server/catgo/routers/workflow.py:434
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:434 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_resume_workflow` without auth dependency — server/catgo/routers/workflow.py:1103
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:1103 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_retry_step` without auth dependency — server/catgo/routers/workflow.py:417
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:417 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_run_workflow` without auth dependency — server/catgo/routers/workflow.py:694
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:694 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_save_as_db` without auth dependency — server/catgo/routers/workflow.py:2463
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2463 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_save_structure` without auth dependency — server/catgo/routers/workflow.py:1379
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:1379 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_serialize_structure` without auth dependency — server/catgo/routers/workflow.py:2595
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2595 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_test_echo` without auth dependency — server/catgo/routers/workflow.py:687
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:687 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_volcano_plot` without auth dependency — server/catgo/routers/workflow.py:485
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:485 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `api_write_file` without auth dependency — server/catgo/routers/workflow.py:2545
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2545 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `apply_strain` without auth dependency — server/catgo/routers/build.py:216
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/build.py:216 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `approve_file` without auth dependency — server/catgo/routers/file_sandbox.py:62
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/file_sandbox.py:62 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `band_from_directory` without auth dependency — server/catgo/routers/bands.py:242
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/bands.py:242 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `batch_build_registry_candidates` without auth dependency — server/catgo/routers/heterostructure.py:267
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/heterostructure.py:267 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `batch_edit` without auth dependency — server/catgo/routers/trajectory_edit.py:110
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/trajectory_edit.py:110 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `build_heterostructure_intermat` without auth dependency — server/catgo/routers/heterostructure.py:345
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/heterostructure.py:345 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `build_heterostructure_manual` without auth dependency — server/catgo/routers/heterostructure.py:406
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/heterostructure.py:406 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `build_heterostructure` without auth dependency — server/catgo/routers/heterostructure.py:200
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/heterostructure.py:200 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `build_lateral_endpoint` without auth dependency — server/catgo/routers/heterostructure.py:495
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/heterostructure.py:495 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `build_moire_structure` without auth dependency — server/catgo/routers/moire.py:156
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/moire.py:156 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `build_nanotube_structure` without auth dependency — server/catgo/routers/nanotube.py:95
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/nanotube.py:95 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `build_polymer` without auth dependency — server/catgo/routers/lammps/setup.py:1540
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/lammps/setup.py:1540 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `build_reticular_structure` without auth dependency — server/catgo/routers/reticular.py:58
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/reticular.py:58 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `calculate_energy` without auth dependency — server/catgo/routers/optimize.py:266
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/optimize.py:266 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `calculate_gibbs` without auth dependency — server/catgo/routers/freq_analysis.py:180
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/freq_analysis.py:180 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `cancel_task` without auth dependency — server/catgo/routers/workflow_engine_tasks.py:152
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow_engine_tasks.py:152 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `catgo_launch` without auth dependency — server/catgo/routers/hpc.py:1348
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:1348 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `catgo_tunnel` without auth dependency — server/catgo/routers/hpc.py:1408
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:1408 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `chat_stream_universal` without auth dependency — server/catgo/routers/chat.py:577
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/chat.py:577 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `chat_stream` without auth dependency — server/catgo/routers/chat.py:151
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/chat.py:151 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `cohp_from_remote` without auth dependency — server/catgo/routers/cohp.py:117
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/cohp.py:117 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `combinatorial_substitution` without auth dependency — server/catgo/routers/build.py:369
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/build.py:369 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_angles` without auth dependency — server/catgo/routers/md_angles.py:224
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_angles.py:224 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_cavitation_profile` without auth dependency — server/catgo/routers/md_cavitation.py:178
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_cavitation.py:178 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_center_of_mass` without auth dependency — server/catgo/routers/md_distances.py:416
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_distances.py:416 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_chgdiff` without auth dependency — server/catgo/routers/chgcar.py:94
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/chgcar.py:94 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_cv_cluster` without auth dependency — server/catgo/routers/md_clustering.py:888
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_clustering.py:888 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_dband` without auth dependency — server/catgo/routers/dos.py:468
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/dos.py:468 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_dihedrals` without auth dependency — server/catgo/routers/md_angles.py:292
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_angles.py:292 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_dimreduce` without auth dependency — server/catgo/routers/md_clustering.py:1030
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_clustering.py:1030 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_distances` without auth dependency — server/catgo/routers/md_distances.py:255
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_distances.py:255 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_msd` without auth dependency — server/catgo/routers/md_dynamics.py:243
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_dynamics.py:243 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_neighbors` without auth dependency — server/catgo/routers/md_distances.py:307
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_distances.py:307 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_pdos` without auth dependency — server/catgo/routers/dos.py:392
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/dos.py:392 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_rdf` without auth dependency — server/catgo/routers/md_distances.py:463
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_distances.py:463 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_rmsd_cluster` without auth dependency — server/catgo/routers/md_clustering.py:778
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_clustering.py:778 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_rmsd_matrix` without auth dependency — server/catgo/routers/md_clustering.py:719
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_clustering.py:719 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_rmsd` without auth dependency — server/catgo/routers/md_rmsd.py:156
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_rmsd.py:156 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_rmsf` without auth dependency — server/catgo/routers/md_rmsd.py:247
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_rmsd.py:247 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_total_dos` without auth dependency — server/catgo/routers/dos.py:437
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/dos.py:437 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_vacf` without auth dependency — server/catgo/routers/md_dynamics.py:330
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_dynamics.py:330 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `compute_water_orientation` without auth dependency — server/catgo/routers/md_orientation.py:156
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_orientation.py:156 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `confirm_all` without auth dependency — server/catgo/routers/workflow_engine.py:131
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow_engine.py:131 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `confirm_task` without auth dependency — server/catgo/routers/workflow_engine_tasks.py:163
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow_engine_tasks.py:163 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `connect_ssh_config` without auth dependency — server/catgo/routers/hpc.py:264
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:264 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `conventional_cell` without auth dependency — server/catgo/routers/structure_ops.py:688
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/structure_ops.py:688 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `convert_chgcar_to_cube` without auth dependency — server/catgo/routers/chgcar.py:58
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/chgcar.py:58 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `convert_with_forcefield` without auth dependency — server/catgo/routers/forcefield.py:237
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/forcefield.py:237 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `convert` without auth dependency — server/catgo/routers/workflow_engine.py:150
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow_engine.py:150 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_custom_engine` without auth dependency — server/catgo/routers/workflow.py:2308
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2308 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_custom_engine` without auth dependency — server/catgo/routers/workflow.py:335
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:335 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_defect` without auth dependency — server/catgo/routers/build.py:122
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/build.py:122 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_doping` without auth dependency — server/catgo/routers/build.py:259
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/build.py:259 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_intercalation` without auth dependency — server/catgo/routers/build.py:328
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/build.py:328 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_profile` without auth dependency — server/catgo/routers/hpc.py:324
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:324 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_supercell` without auth dependency — server/catgo/routers/build.py:202
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/build.py:202 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_supercell` without auth dependency — server/catgo/routers/structure_ops.py:380
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/structure_ops.py:380 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_tool` without auth dependency — server/catgo/routers/tools.py:115
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/tools.py:115 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `cube_info` without auth dependency — server/catgo/routers/cube.py:74
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/cube.py:74 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `delete_atoms` without auth dependency — server/catgo/routers/structure_ops.py:271
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/structure_ops.py:271 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `density_profile` without auth dependency — server/catgo/routers/md_density.py:264
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_density.py:264 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `detect_hbonds` without auth dependency — server/catgo/routers/md_hbonds.py:359
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_hbonds.py:359 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `disable_plugin` without auth dependency — server/catgo/routers/plugins.py:524
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/plugins.py:524 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `disable_tool` without auth dependency — server/catgo/routers/tools.py:99
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/tools.py:99 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `discover_tools_endpoint` without auth dependency — server/catgo/routers/tools.py:183
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/tools.py:183 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `dos_from_directory` without auth dependency — server/catgo/routers/dos.py:266
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/dos.py:266 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `dos_from_remote` without auth dependency — server/catgo/routers/dos.py:228
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/dos.py:228 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `enable_plugin` without auth dependency — server/catgo/routers/plugins.py:499
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/plugins.py:499 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `enable_tool` without auth dependency — server/catgo/routers/tools.py:90
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/tools.py:90 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `execute_tool` without auth dependency — server/catgo/routers/tool_bridge.py:87
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/tool_bridge.py:87 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `extract_isosurface` without auth dependency — server/catgo/routers/cube.py:98
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/cube.py:98 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `extract_plane_slice` without auth dependency — server/catgo/routers/cube.py:208
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/cube.py:208 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `extract_slice` without auth dependency — server/catgo/routers/cube.py:159
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/cube.py:159 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `fetch_provider_models` without auth dependency — server/catgo/routers/chat.py:526
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/chat.py:526 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `find_adsorption_sites` without auth dependency — server/catgo/routers/adsorption.py:77
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/adsorption.py:77 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_input_file` without auth dependency — server/catgo/routers/cp2k.py:753
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/cp2k.py:753 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_input_file` without auth dependency — server/catgo/routers/qe.py:480
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/qe.py:480 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_input_files` without auth dependency — server/catgo/routers/lammps/setup.py:1358
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/lammps/setup.py:1358 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_orca_inputs_endpoint` without auth dependency — server/catgo/routers/orca.py:97
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/orca.py:97 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_orca_irc_endpoint` without auth dependency — server/catgo/routers/orca.py:135
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/orca.py:135 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_orca_neb_ts_endpoint` without auth dependency — server/catgo/routers/orca.py:116
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/orca.py:116 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_polymer_workflow` without auth dependency — server/catgo/routers/lammps/setup.py:1643
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/lammps/setup.py:1643 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_sequential_lammps` without auth dependency — server/catgo/routers/lammps/setup.py:1589
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/lammps/setup.py:1589 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_slab` without auth dependency — server/catgo/routers/structure_ops.py:744
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/structure_ops.py:744 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_vasp_inputs_endpoint` without auth dependency — server/catgo/routers/vasp.py:129
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/vasp.py:129 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `get_band_data` without auth dependency — server/catgo/routers/bands.py:301
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/bands.py:301 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `get_band_projections` without auth dependency — server/catgo/routers/bands.py:341
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/bands.py:341 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `get_cohp_data` without auth dependency — server/catgo/routers/cohp.py:187
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/cohp.py:187 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `get_nanotube_info` without auth dependency — server/catgo/routers/nanotube.py:58
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/nanotube.py:58 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `grid_scan_heterostructure` without auth dependency — server/catgo/routers/heterostructure.py:544
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/heterostructure.py:544 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `hbond_density` without auth dependency — server/catgo/routers/md_hbonds.py:623
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_hbonds.py:623 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `hbond_lifetime` without auth dependency — server/catgo/routers/md_hbonds.py:515
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_hbonds.py:515 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `import_flow` without auth dependency — server/catgo/routers/atomate2.py:23
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/atomate2.py:23 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `import_flow` without auth dependency — server/catgo/routers/quacc.py:54
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/quacc.py:54 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `install_plugin_upload` without auth dependency — server/catgo/routers/plugins.py:562
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/plugins.py:562 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `install_plugin` without auth dependency — server/catgo/routers/hub.py:208
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hub.py:208 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `list_files` without auth dependency — server/catgo/routers/hpc.py:808
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:808 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `merge_structures` without auth dependency — server/catgo/routers/hpc.py:1045
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:1045 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `merge_structures` without auth dependency — server/catgo/routers/structure_ops.py:422
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/structure_ops.py:422 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `merge_upload` without auth dependency — server/catgo/routers/view_capture.py:651
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/view_capture.py:651 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `move_atom` without auth dependency — server/catgo/routers/structure_ops.py:320
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/structure_ops.py:320 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `move_atoms` without auth dependency — server/catgo/routers/structure_ops.py:350
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/structure_ops.py:350 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `optimize_structure` without auth dependency — server/catgo/routers/optimize.py:130
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/optimize.py:130 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `parse_from_directory` without auth dependency — server/catgo/routers/freq_analysis.py:154
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/freq_analysis.py:154 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `parse_structure` without auth dependency — server/catgo/routers/vasp.py:66
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/vasp.py:66 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `passivate_slab` without auth dependency — server/catgo/routers/pseudo_hydrogen.py:22
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/pseudo_hydrogen.py:22 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `pause` without auth dependency — server/catgo/routers/workflow_engine.py:110
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow_engine.py:110 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `place_adsorbate_on_site` without auth dependency — server/catgo/routers/adsorption.py:302
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/adsorption.py:302 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `place_dual_adsorbates_on_site` without auth dependency — server/catgo/routers/adsorption.py:371
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/adsorption.py:371 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `planar_density` without auth dependency — server/catgo/routers/md_density.py:419
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/md_density.py:419 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `preflight_vasp` without auth dependency — server/catgo/routers/hpc.py:1981
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:1981 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `propose_file` without auth dependency — server/catgo/routers/file_sandbox.py:47
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/file_sandbox.py:47 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `publish_plugin` without auth dependency — server/catgo/routers/hub.py:266
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hub.py:266 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `push_pending_workflow_update` without auth dependency — server/catgo/routers/workflow.py:164
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:164 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `push_structure` without auth dependency — server/catgo/routers/view_capture.py:330
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/view_capture.py:330 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `read_binary_file_content` without auth dependency — server/catgo/routers/hpc.py:625
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:625 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `read_file_content` without auth dependency — server/catgo/routers/hpc.py:525
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:525 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `read_many_file_content` without auth dependency — server/catgo/routers/hpc.py:546
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:546 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `refresh_plugins` without auth dependency — server/catgo/routers/plugins.py:603
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/plugins.py:603 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reject_proposal` without auth dependency — server/catgo/routers/file_sandbox.py:74
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/file_sandbox.py:74 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reject_task` without auth dependency — server/catgo/routers/workflow_engine_tasks.py:200
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow_engine_tasks.py:200 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `replace_atom` without auth dependency — server/catgo/routers/structure_ops.py:296
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/structure_ops.py:296 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `request_catrender` without auth dependency — server/catgo/routers/view_capture.py:247
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/view_capture.py:247 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `request_screenshot` without auth dependency — server/catgo/routers/view_capture.py:150
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/view_capture.py:150 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reset_view_state` without auth dependency — server/catgo/routers/view_capture.py:112
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/view_capture.py:112 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reset` without auth dependency — server/catgo/routers/workflow_engine.py:124
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow_engine.py:124 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `resolve_doi` without auth dependency — server/catgo/routers/paper.py:191
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/paper.py:191 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `resubmit_job_endpoint` without auth dependency — server/catgo/routers/hpc.py:697
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:697 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `resume` without auth dependency — server/catgo/routers/workflow_engine.py:117
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow_engine.py:117 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `retry_task` without auth dependency — server/catgo/routers/workflow_engine_tasks.py:141
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow_engine_tasks.py:141 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_analyzer` without auth dependency — server/catgo/routers/plugins.py:431
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/plugins.py:431 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_install` without auth dependency — server/catgo/routers/hpc.py:1152
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:1152 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_lammps` without auth dependency — server/catgo/routers/lammps/simulation.py:267
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/lammps/simulation.py:267 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_tool` without auth dependency — server/catgo/routers/tools.py:59
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/tools.py:59 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `save_tool_endpoint` without auth dependency — server/catgo/routers/tools.py:145
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/tools.py:145 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `scan_potential` without auth dependency — server/catgo/routers/kmc.py:102
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/kmc.py:102 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `scan_temperature` without auth dependency — server/catgo/routers/kmc.py:123
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/kmc.py:123 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `search_commensurate_angles` without auth dependency — server/catgo/routers/moire.py:36
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/moire.py:36 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `search_heterostructure_matches` without auth dependency — server/catgo/routers/heterostructure.py:118
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/heterostructure.py:118 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `search_lateral_matches_endpoint` without auth dependency — server/catgo/routers/heterostructure.py:448
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/heterostructure.py:448 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `search_mofs_route` without auth dependency — server/catgo/routers/mofdb.py:49
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/mofdb.py:49 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `search_structures` without auth dependency — server/catgo/routers/materials_project.py:75
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/materials_project.py:75 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `search_structures` without auth dependency — server/catgo/routers/optimade.py:238
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/optimade.py:238 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `select_atoms` without auth dependency — server/catgo/routers/dos.py:500
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/dos.py:500 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `select_band_atoms` without auth dependency — server/catgo/routers/bands.py:440
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/bands.py:440 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_active_panel` without auth dependency — server/catgo/routers/view_capture.py:725
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/view_capture.py:725 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_lattice` without auth dependency — server/catgo/routers/structure_ops.py:701
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/structure_ops.py:701 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_pending_structure_update` without auth dependency — server/catgo/routers/view_capture.py:381
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/view_capture.py:381 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_pending_workflow_navigate` without auth dependency — server/catgo/routers/view_capture.py:440
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/view_capture.py:440 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `setup_claude_code` without auth dependency — server/catgo/routers/hpc.py:1660
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:1660 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `simulate_kmc` without auth dependency — server/catgo/routers/kmc.py:68
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/kmc.py:68 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `smiles_to_xyz` without auth dependency — server/catgo/routers/structure_ops.py:865
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/structure_ops.py:865 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `solve_microkinetic` without auth dependency — server/catgo/routers/kmc.py:86
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/kmc.py:86 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `submit_job` without auth dependency — server/catgo/routers/hpc.py:350
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:350 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `submit` without auth dependency — server/catgo/routers/workflow_engine.py:100
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow_engine.py:100 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `test_provider` without auth dependency — server/catgo/routers/chat.py:535
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/chat.py:535 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `to_conventional` without auth dependency — server/catgo/routers/structure_ops.py:828
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/structure_ops.py:828 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trajectory_upload` without auth dependency — server/catgo/routers/trajectory_stream.py:579
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/trajectory_stream.py:579 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `update_plugin` without auth dependency — server/catgo/routers/hub.py:217
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hub.py:217 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `update_selection` without auth dependency — server/catgo/routers/view_capture.py:474
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/view_capture.py:474 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `update_structure_info` without auth dependency — server/catgo/routers/view_capture.py:319
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/view_capture.py:319 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upgrade_tool_endpoint` without auth dependency — server/catgo/routers/tools.py:161
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/tools.py:161 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_and_load` without auth dependency — server/catgo/routers/view_capture.py:571
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/view_capture.py:571 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_band_vasprun` without auth dependency — server/catgo/routers/bands.py:159
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/bands.py:159 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_catrender` without auth dependency — server/catgo/routers/view_capture.py:287
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/view_capture.py:287 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_cohpcar` without auth dependency — server/catgo/routers/cohp.py:58
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/cohp.py:58 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_cube_file` without auth dependency — server/catgo/routers/cube.py:50
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/cube.py:50 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_file` without auth dependency — server/catgo/routers/hpc.py:833
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:833 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_h5` without auth dependency — server/catgo/routers/dos.py:149
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/dos.py:149 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_icohplist` without auth dependency — server/catgo/routers/cohp.py:274
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/cohp.py:274 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_outcar` without auth dependency — server/catgo/routers/freq_analysis.py:138
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/freq_analysis.py:138 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_paper` without auth dependency — server/catgo/routers/paper.py:92
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/paper.py:92 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_procar` without auth dependency — server/catgo/routers/dos.py:179
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/dos.py:179 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_report_file` without auth dependency — server/catgo/routers/vasp.py:191
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/vasp.py:191 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_report_text` without auth dependency — server/catgo/routers/vasp.py:223
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/vasp.py:223 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_screenshot` without auth dependency — server/catgo/routers/view_capture.py:200
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/view_capture.py:200 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_to_reader` without auth dependency — server/catgo/routers/plugins.py:205
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/plugins.py:205 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `validate_lammps_input` without auth dependency — server/catgo/routers/lammps/setup.py:1499
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/lammps/setup.py:1499 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `validate_model` without auth dependency — server/catgo/routers/kmc.py:144
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/kmc.py:144 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `write_file_content` without auth dependency — server/catgo/routers/hpc.py:646
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/hpc.py:646 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `write_file_direct` without auth dependency — server/catgo/routers/file_sandbox.py:84
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/file_sandbox.py:84 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_assign_workflow_to_project` without auth dependency — server/catgo/routers/workflow.py:2814
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2814 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_move_result` without auth dependency — server/catgo/routers/workflow.py:1435
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:1435 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_update_project` without auth dependency — server/catgo/routers/workflow.py:2781
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:2781 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_update_result_label` without auth dependency — server/catgo/routers/workflow.py:1407
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:1407 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_update_step` without auth dependency — server/catgo/routers/workflow.py:396
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:396 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `api_update_workflow` without auth dependency — server/catgo/routers/workflow.py:370
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow.py:370 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `assign_project` without auth dependency — server/catgo/routers/workflow_engine.py:168
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow_engine.py:168 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `put_task_file_content` without auth dependency — server/catgo/routers/workflow_engine_tasks.py:395
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow_engine_tasks.py:395 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_params` without auth dependency — server/catgo/routers/workflow_engine_tasks.py:102
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/catgo/routers/workflow_engine_tasks.py:102 securityAuth fastapi unauth mutation

Showing first 300 of 654. Refine filters or use the findings page for deep search.

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/6b565384-68f5-42ad-a5cf-2addef33ce3d/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/6b565384-68f5-42ad-a5cf-2addef33ce3d/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.