Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

Rtoony/rtoony-portal

https://github.com/Rtoony/rtoony-portal · scanned 2026-06-15 23:57 UTC (2 months, 3 weeks ago)

474 raw signals (0 security + 474 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 3 weeks ago · v1 · 439 actionable findings from 1 signal source. 35 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
70.5
/100
Security checks
71
0 findings
System graph
71
100.0% cov · 439 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: severity: high × excluding tests × Reset all
Severity: Critical 0 High 256 Medium 14 Low 105 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 439 Crowd 0 Layer: Software 20 Frontend 53 Security 218 Cicd 1 Quality 93 Api 54
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 70.5/100 with 100.0% coverage. It contains 4654 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 474 findings — concentrated in security (218), quality (128), api (54). Risk profile is high: 0 critical, 256 high, 33 medium. Recommended next step: open the security layer findings first — that's where the highest-impact wins live.

Showing 256 of 439 actionable findings. 474 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high System graph quality Integrity conf 1.00 Blocking `requests.get(...)` inside `async def cloudflare_security` — server/routes/widgets.py:365
Sync I/O inside an async function blocks the event loop. While `requests.get(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_th…
server/routes/widgets.py:365 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_alert_border` — server/xkeys_service.py:408
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:408 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_alert_border` — server/xkeys_service.py:412
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:412 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_attention` — server/xkeys_service.py:493
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:493 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_attention` — server/xkeys_service.py:500
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:500 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_cascade` — server/xkeys_service.py:756
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:756 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_countdown_timer` — server/xkeys_service.py:641
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:641 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_countdown_timer` — server/xkeys_service.py:643
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:643 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_countdown_timer` — server/xkeys_service.py:687
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:687 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_countdown` — server/xkeys_service.py:509
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:509 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_countdown` — server/xkeys_service.py:511
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:511 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_countdown` — server/xkeys_service.py:519
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:519 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_decision_gate` — server/xkeys_service.py:544
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:544 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_decision_gate` — server/xkeys_service.py:549
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:549 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_decision_gate` — server/xkeys_service.py:575
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:575 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_decision_gate` — server/xkeys_service.py:579
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:579 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_decision_gate` — server/xkeys_service.py:584
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:584 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_decision_gate` — server/xkeys_service.py:588
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:588 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_deck_reveal` — server/xkeys_service.py:859
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:859 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_failure` — server/xkeys_service.py:478
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:478 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_fill_up` — server/xkeys_service.py:531
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:531 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_heartbeat` — server/xkeys_service.py:770
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:770 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_highlight_key` — server/xkeys_service.py:444
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:444 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_radar_sweep` — server/xkeys_service.py:730
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:730 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_ripple_center` — server/xkeys_service.py:430
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:430 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_ripple_center` — server/xkeys_service.py:433
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:433 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_security_keypad` — server/xkeys_service.py:604
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:604 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_security_keypad` — server/xkeys_service.py:628
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:628 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_security_keypad` — server/xkeys_service.py:632
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:632 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_snake` — server/xkeys_service.py:811
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:811 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_success` — server/xkeys_service.py:466
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:466 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_sweep_down` — server/xkeys_service.py:391
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:391 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_sweep_down` — server/xkeys_service.py:395
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:395 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_sweep_right` — server/xkeys_service.py:366
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:366 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_sweep_right` — server/xkeys_service.py:370
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:370 Sync io in asyncPerformance
high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def _anim_sweep_right` — server/xkeys_service.py:374
Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…
server/xkeys_service.py:374 Sync io in asyncPerformance
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/3d/jobs (client/src/pages/trellis.tsx:274)
`client/src/pages/trellis.tsx:274` calls `POST /api/3d/jobs` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/3d/jobs` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/voice-forge/profiles/${profileId}/sources (client/src/components/voice-lab/voice-forge.tsx:240)
`client/src/components/voice-lab/voice-forge.tsx:240` calls `POST /api/voice-forge/profiles/${profileId}/sources` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/voice-forge/profiles/<p>/sources` If this points at an…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/voice/call/respond (client/src/hooks/useVoiceCall.ts:161)
`client/src/hooks/useVoiceCall.ts:161` calls `POST /api/voice/call/respond` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/voice/call/respond` If this points at an external API, prefix it with `https://` so the matc…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/voice/call/transcribe (client/src/hooks/useVoiceCall.ts:141)
`client/src/hooks/useVoiceCall.ts:141` calls `POST /api/voice/call/transcribe` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/voice/call/transcribe` If this points at an external API, prefix it with `https://` so th…
Dangling fetchFetch
high System graph security auth conf 1.00 FastAPI DELETE `clear_code` without auth dependency — server/routes/condo_castle_security.py:261
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_security.py:261 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `clear_events` without auth dependency — server/routes/gesture_events.py:61
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/gesture_events.py:61 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `clear_nemo_binding` without auth dependency — server/routes/voice.py:189
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice.py:189 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_batch` without auth dependency — server/routes/sources.py:700
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/sources.py:700 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_edge` without auth dependency — server/routes/homelab_map.py:390
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/homelab_map.py:390 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_element` without auth dependency — server/routes/condo_castle_editor.py:546
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:546 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_entry` without auth dependency — server/routes/voice_memos.py:58
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_memos.py:58 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_experiment` without auth dependency — server/routes/spatial_experiments.py:241
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/spatial_experiments.py:241 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_family_member` without auth dependency — server/routes/condo_castle_security.py:372
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_security.py:372 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_floor` without auth dependency — server/routes/condo_castle_editor.py:438
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:438 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_generation` without auth dependency — server/routes/voice_lab.py:473
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_lab.py:473 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_item_link` without auth dependency — server/routes/ingestion/legacy.py:2404
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/legacy.py:2404 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_layout` without auth dependency — server/routes/layouts.py:175
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/layouts.py:175 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_log_entry` without auth dependency — server/routes/spatial_experiments.py:1273
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/spatial_experiments.py:1273 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_node` without auth dependency — server/routes/homelab_map.py:345
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/homelab_map.py:345 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_opening` without auth dependency — server/routes/condo_castle_editor.py:632
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:632 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_profile` without auth dependency — server/routes/voice_forge.py:207
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_forge.py:207 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_project` without auth dependency — server/routes/condo_castle_editor.py:222
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:222 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_room` without auth dependency — server/routes/condo_castle_editor.py:492
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:492 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_session` without auth dependency — server/routes/claws_sessions.py:334
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:334 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_session` without auth dependency — server/routes/nemo_sessions.py:111
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/nemo_sessions.py:111 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_source` without auth dependency — server/routes/voice_forge.py:301
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_forge.py:301 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_splat_job` without auth dependency — server/routes/splat.py:1203
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/splat.py:1203 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `terminate_terminal_session` without auth dependency — server/routes/terminal.py:421
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/terminal.py:421 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_experiment` without auth dependency — server/routes/spatial_experiments.py:194
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/spatial_experiments.py:194 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_profile` without auth dependency — server/routes/voice_forge.py:183
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_forge.py:183 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_source_policy` without auth dependency — server/routes/ingestion/legacy.py:397
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/legacy.py:397 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_topic_package` without auth dependency — server/routes/ingestion/topics.py:258
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/topics.py:258 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `abandon_session` without auth dependency — server/routes/claws_sessions.py:301
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:301 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `accept_proposal` without auth dependency — server/routes/claws_sessions.py:726
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:726 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_feedback` without auth dependency — server/routes/dev_feedback.py:51
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/dev_feedback.py:51 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_log_entry` without auth dependency — server/routes/spatial_experiments.py:1222
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/spatial_experiments.py:1222 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_marker` without auth dependency — server/routes/spatial_experiments.py:1172
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/spatial_experiments.py:1172 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_task_endpoint` without auth dependency — server/routes/claws_sessions.py:370
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:370 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `analyze_source_intake` without auth dependency — server/routes/ingestion/legacy.py:916
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/legacy.py:916 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `append_run_artifact` without auth dependency — server/routes/lab.py:215
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/lab.py:215 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `append_run_event` without auth dependency — server/routes/lab.py:193
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/lab.py:193 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `approve_memory_backfill` without auth dependency — server/routes/claws_sessions.py:470
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:470 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `approve_plan` without auth dependency — server/routes/claws_sessions.py:250
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:250 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `approve_promotion` without auth dependency — server/routes/claws_promotions.py:161
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_promotions.py:161 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `approve_proposal` without auth dependency — server/routes/hermes_cartographer.py:160
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/hermes_cartographer.py:160 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `approve_request` without auth dependency — server/routes/nemo_approvals.py:39
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/nemo_approvals.py:39 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `approve_via_telegram` without auth dependency — server/routes/telegram_callback.py:31
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/telegram_callback.py:31 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `attach_run_key_endpoint` without auth dependency — server/routes/claws_sessions.py:424
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:424 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `audition_segment` without auth dependency — server/routes/voice_forge.py:591
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_forge.py:591 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `auto_review_items` without auth dependency — server/routes/ingestion/legacy.py:2214
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/legacy.py:2214 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `auto_segment_image` without auth dependency — server/routes/multimodal.py:564
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/multimodal.py:564 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `bulk_review_items` without auth dependency — server/routes/ingestion/legacy.py:2129
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/legacy.py:2129 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `bulk_update_references` without auth dependency — server/routes/sources.py:1524
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/sources.py:1524 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `calibrate` without auth dependency — server/routes/wifi_sensing.py:116
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/wifi_sensing.py:116 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `cancel_chat` without auth dependency — server/routes/chat.py:120
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/chat.py:120 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `capture_from_camera` without auth dependency — server/routes/vision.py:259
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/vision.py:259 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `chat_stream` without auth dependency — server/routes/chat.py:30
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/chat.py:30 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `clear_vram` without auth dependency — server/routes/system.py:1066
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/system.py:1066 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `complete_wave` without auth dependency — server/routes/claws_sessions.py:265
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:265 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `control_device` without auth dependency — server/routes/condo_castle.py:747
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle.py:747 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_batch` without auth dependency — server/routes/sources.py:515
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/sources.py:515 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_edge` without auth dependency — server/routes/homelab_map.py:361
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/homelab_map.py:361 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_element` without auth dependency — server/routes/condo_castle_editor.py:502
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:502 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_experiment` without auth dependency — server/routes/spatial_experiments.py:135
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/spatial_experiments.py:135 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_family_member` without auth dependency — server/routes/condo_castle_security.py:336
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_security.py:336 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_floor` without auth dependency — server/routes/condo_castle_editor.py:402
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:402 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_item_link` without auth dependency — server/routes/ingestion/legacy.py:2368
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/legacy.py:2368 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_memory_backfill_from_latest` without auth dependency — server/routes/claws_sessions.py:118
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:118 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_node` without auth dependency — server/routes/homelab_map.py:254
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/homelab_map.py:254 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_opening` without auth dependency — server/routes/condo_castle_editor.py:583
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:583 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_profile` without auth dependency — server/routes/voice_forge.py:138
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_forge.py:138 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_project` without auth dependency — server/routes/condo_castle_editor.py:171
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:171 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_room` without auth dependency — server/routes/condo_castle_editor.py:448
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:448 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_run` without auth dependency — server/routes/lab.py:162
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/lab.py:162 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_run` without auth dependency — server/routes/nemo_runs.py:42
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/nemo_runs.py:42 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_session` without auth dependency — server/routes/claws_sessions.py:88
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:88 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_session` without auth dependency — server/routes/nemo_sessions.py:36
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/nemo_sessions.py:36 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_source_intake_draft` without auth dependency — server/routes/ingestion/legacy.py:1231
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/legacy.py:1231 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_topic_package` without auth dependency — server/routes/ingestion/topics.py:193
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/topics.py:193 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_wave_endpoint` without auth dependency — server/routes/claws_sessions.py:352
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:352 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `curated_import` without auth dependency — server/routes/sources.py:533
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/sources.py:533 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `defer_proposal` without auth dependency — server/routes/hermes_cartographer.py:246
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/hermes_cartographer.py:246 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `disable_gestures` without auth dependency — server/routes/vision.py:311
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/vision.py:311 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `dispatch_wave` without auth dependency — server/routes/claws_sessions.py:673
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:673 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `enable_gestures` without auth dependency — server/routes/vision.py:302
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/vision.py:302 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `export_body_mesh` without auth dependency — server/routes/multimodal.py:456
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/multimodal.py:456 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `export_direct` without auth dependency — server/routes/nemo_artifacts.py:75
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/nemo_artifacts.py:75 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `export_project` without auth dependency — server/routes/condo_castle_editor.py:642
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:642 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `fetch_batch_fulltext` without auth dependency — server/routes/sources.py:1434
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/sources.py:1434 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `fetch_reference_fulltext` without auth dependency — server/routes/sources.py:1395
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/sources.py:1395 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `finalize_profile` without auth dependency — server/routes/voice_forge.py:677
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_forge.py:677 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `focus_window` without auth dependency — server/routes/xkeys.py:86
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/xkeys.py:86 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `gate_decision` without auth dependency — server/routes/claws_sessions.py:280
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:280 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_image` without auth dependency — server/routes/multimodal.py:682
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/multimodal.py:682 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_mesh` without auth dependency — server/routes/multimodal.py:340
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/multimodal.py:340 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_proposal` without auth dependency — server/routes/claws_workflow_architect.py:23
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_workflow_architect.py:23 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_splat_preview` without auth dependency — server/routes/splat.py:1100
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/splat.py:1100 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_video` without auth dependency — server/routes/multimodal.py:629
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/multimodal.py:629 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `import_once_source` without auth dependency — server/routes/ingestion/legacy.py:1019
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/legacy.py:1019 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `import_project` without auth dependency — server/routes/condo_castle_editor.py:648
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:648 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `link_reference_canonical_work` without auth dependency — server/routes/sources.py:1258
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/sources.py:1258 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `load_directory` without auth dependency — server/routes/sources.py:716
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/sources.py:716 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `load_layout` without auth dependency — server/routes/layouts.py:188
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/layouts.py:188 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `lock_door` without auth dependency — server/routes/condo_castle_security.py:111
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_security.py:111 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `notify` without auth dependency — server/routes/xkeys.py:134
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/xkeys.py:134 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `pin_splat_job` without auth dependency — server/routes/splat.py:1228
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/splat.py:1228 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `play_animation` without auth dependency — server/routes/xkeys.py:116
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/xkeys.py:116 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `power_off_vision_console` without auth dependency — server/routes/vision.py:250
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/vision.py:250 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `power_on_vision_console` without auth dependency — server/routes/vision.py:241
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/vision.py:241 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `preempt_active_lease` without auth dependency — server/routes/claws_governor.py:391
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_governor.py:391 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `press_key` without auth dependency — server/routes/xkeys.py:38
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/xkeys.py:38 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `prewarm_model` without auth dependency — server/routes/multimodal.py:601
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/multimodal.py:601 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `promote_investigation` without auth dependency — server/routes/nemo_bridge.py:240
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/nemo_bridge.py:240 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `promote_run_memory` without auth dependency — server/routes/nemo_memory.py:47
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/nemo_memory.py:47 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `promote_source_intake_draft` without auth dependency — server/routes/ingestion/legacy.py:1299
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/legacy.py:1299 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `propose_gate` without auth dependency — server/routes/claws_sessions.py:692
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:692 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `proxmox_vm_action` without auth dependency — server/routes/system.py:933
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/system.py:933 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `publish_topic_package` without auth dependency — server/routes/ingestion/topics.py:311
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/topics.py:311 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `purge_old` without auth dependency — server/routes/voice_lab.py:492
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_lab.py:492 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `receive_gesture_event` without auth dependency — server/routes/gesture_events.py:23
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/gesture_events.py:23 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `recommend_vision_route` without auth dependency — server/routes/multimodal.py:212
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/multimodal.py:212 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reconcile_wave` without auth dependency — server/routes/claws_sessions.py:770
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:770 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reconstruct_body` without auth dependency — server/routes/multimodal.py:500
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/multimodal.py:500 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reconstruct_general_3d` without auth dependency — server/routes/multimodal.py:388
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/multimodal.py:388 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `record_vote` without auth dependency — server/routes/arena.py:305
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/arena.py:305 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `redraft_memory_backfill` without auth dependency — server/routes/claws_sessions.py:552
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:552 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `refresh_catalog` without auth dependency — server/routes/voice_lab.py:501
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_lab.py:501 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `refresh_xkeys` without auth dependency — server/routes/xkeys.py:28
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/xkeys.py:28 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reject_promotion` without auth dependency — server/routes/claws_promotions.py:189
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_promotions.py:189 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reject_proposal` without auth dependency — server/routes/claws_sessions.py:747
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:747 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reject_proposal` without auth dependency — server/routes/hermes_cartographer.py:223
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/hermes_cartographer.py:223 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `request_export` without auth dependency — server/routes/nemo_artifacts.py:52
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/nemo_artifacts.py:52 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `resolve_feedback` without auth dependency — server/routes/dev_feedback.py:79
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/dev_feedback.py:79 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `respond` without auth dependency — server/routes/voice_call.py:123
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_call.py:123 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `restart_service` without auth dependency — server/routes/system.py:1086
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/system.py:1086 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_inspect_action` without auth dependency — server/routes/ingestion/legacy.py:1391
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/legacy.py:1391 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_promote_evidence_action` without auth dependency — server/routes/ingestion/legacy.py:1445
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/legacy.py:1445 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_promote_signal_action` without auth dependency — server/routes/ingestion/legacy.py:1474
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/legacy.py:1474 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_scholarly_backfill_action` without auth dependency — server/routes/ingestion/legacy.py:1503
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/legacy.py:1503 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_scholarly_index_action` without auth dependency — server/routes/ingestion/legacy.py:1528
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/legacy.py:1528 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_stage_source_action` without auth dependency — server/routes/ingestion/legacy.py:1414
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/legacy.py:1414 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `score_segment` without auth dependency — server/routes/voice_forge.py:539
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_forge.py:539 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `segment_image` without auth dependency — server/routes/multimodal.py:226
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/multimodal.py:226 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `segment_source` without auth dependency — server/routes/voice_forge.py:317
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_forge.py:317 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `send_digest_now` without auth dependency — server/routes/ingestion/digest.py:306
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/digest.py:306 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_all_leds` without auth dependency — server/routes/xkeys.py:97
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/xkeys.py:97 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_auto` without auth dependency — server/routes/xkeys.py:55
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/xkeys.py:55 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_canonical` without auth dependency — server/routes/voice_forge.py:558
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_forge.py:558 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_code` without auth dependency — server/routes/condo_castle_security.py:210
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_security.py:210 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_commands` without auth dependency — server/routes/xkeys.py:65
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/xkeys.py:65 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_focus` without auth dependency — server/routes/briefing.py:516
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/briefing.py:516 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_led` without auth dependency — server/routes/xkeys.py:91
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/xkeys.py:91 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_task_status_endpoint` without auth dependency — server/routes/claws_sessions.py:441
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:441 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `setup_areas` without auth dependency — server/routes/condo_castle.py:1045
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle.py:1045 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_battle_stream` without auth dependency — server/routes/arena.py:229
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/arena.py:229 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_edge` without auth dependency — server/routes/wifi_sensing.py:81
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/wifi_sensing.py:81 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_ingest` without auth dependency — server/routes/sources.py:2375
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/sources.py:2375 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_investigation` without auth dependency — server/routes/nemo_bridge.py:87
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/nemo_bridge.py:87 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_recording` without auth dependency — server/routes/spatial_experiments.py:259
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/spatial_experiments.py:259 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_refine` without auth dependency — server/routes/sources.py:1669
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/sources.py:1669 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_research_session` without auth dependency — server/routes/nemo_bridge.py:284
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/nemo_bridge.py:284 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_scan` without auth dependency — server/routes/sources.py:996
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/sources.py:996 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_splat_training` without auth dependency — server/routes/splat.py:1022
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/splat.py:1022 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_transcript_ingest` without auth dependency — server/routes/sources.py:2641
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/sources.py:2641 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_verify` without auth dependency — server/routes/sources.py:1861
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/sources.py:1861 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `stop_animation` without auth dependency — server/routes/xkeys.py:128
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/xkeys.py:128 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `stop_edge` without auth dependency — server/routes/wifi_sensing.py:101
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/wifi_sensing.py:101 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `stop_recording` without auth dependency — server/routes/spatial_experiments.py:302
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/spatial_experiments.py:302 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `stop_splat_training` without auth dependency — server/routes/splat.py:1168
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/splat.py:1168 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `submit_for_promotion` without auth dependency — server/routes/claws_promotions.py:109
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_promotions.py:109 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `switch_deck` without auth dependency — server/routes/xkeys.py:46
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/xkeys.py:46 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `sync_batch_canonical_works` without auth dependency — server/routes/sources.py:1319
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/sources.py:1319 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `sync_maximus_skills` without auth dependency — server/routes/homelab_map.py:459
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/homelab_map.py:459 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `synthesize` without auth dependency — server/routes/voice_lab.py:322
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_lab.py:322 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `telegram_mini_backup_trigger` without auth dependency — server/routes/telegram.py:361
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/telegram.py:361 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `telegram_mini_house_control` without auth dependency — server/routes/telegram.py:243
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/telegram.py:243 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `telegram_mini_plex_scan` without auth dependency — server/routes/telegram.py:355
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/telegram.py:355 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `telegram_mini_routine` without auth dependency — server/routes/telegram.py:275
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/telegram.py:275 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `telegram_test` without auth dependency — server/routes/telegram.py:82
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/telegram.py:82 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `telegram_webhook` without auth dependency — server/routes/telegram.py:22
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/telegram.py:22 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `toggle_favorite` without auth dependency — server/routes/voice_lab.py:456
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_lab.py:456 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `totp_reset` without auth dependency — server/routes/totp.py:207
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/totp.py:207 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `totp_setup` without auth dependency — server/routes/totp.py:113
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/totp.py:113 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `totp_verify` without auth dependency — server/routes/totp.py:153
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/totp.py:153 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `track_video_object` without auth dependency — server/routes/multimodal.py:285
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/multimodal.py:285 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `transcribe_segment` without auth dependency — server/routes/voice_forge.py:505
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_forge.py:505 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `transcribe` without auth dependency — server/routes/voice_call.py:77
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_call.py:77 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_backup_witness_probe` without auth dependency — server/routes/claws_backup_witness.py:12
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_backup_witness.py:12 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_backup` without auth dependency — server/routes/backups.py:114
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/backups.py:114 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_blacksmith_forge` without auth dependency — server/routes/claws_blacksmith.py:32
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_blacksmith.py:32 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_blacksmith_probe` without auth dependency — server/routes/claws_blacksmith.py:18
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_blacksmith.py:18 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_cartographer_probe` without auth dependency — server/routes/claws_cartographer.py:18
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_cartographer.py:18 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_eval_run` without auth dependency — server/routes/claws_evals.py:19
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_evals.py:19 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_foundry_probe` without auth dependency — server/routes/claws_foundry.py:12
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_foundry.py:12 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_guardian_probe` without auth dependency — server/routes/claws_guardian.py:22
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_guardian.py:22 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_model_steward_probe` without auth dependency — server/routes/claws_model_steward.py:12
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_model_steward.py:12 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_power_sentinel_probe` without auth dependency — server/routes/claws_power_sentinel.py:18
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_power_sentinel.py:18 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_transcode_plex_scan` without auth dependency — server/routes/transcode.py:132
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/transcode.py:132 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `trigger_zone` without auth dependency — server/routes/xkeys.py:76
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/xkeys.py:76 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `unlock_door` without auth dependency — server/routes/condo_castle_security.py:118
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_security.py:118 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `unpin_splat_job` without auth dependency — server/routes/splat.py:1236
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/splat.py:1236 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `update_config` without auth dependency — server/routes/xkeys.py:33
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/xkeys.py:33 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `update_hypothesis` without auth dependency — server/routes/claws_sessions.py:316
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/claws_sessions.py:316 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `update_reference` without auth dependency — server/routes/sources.py:1493
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/sources.py:1493 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `update_review_item` without auth dependency — server/routes/ingestion/legacy.py:2024
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/ingestion/legacy.py:2024 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_source` without auth dependency — server/routes/voice_forge.py:225
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice_forge.py:225 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_splat_input` without auth dependency — server/routes/splat.py:953
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/splat.py:953 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `batch_update_elements` without auth dependency — server/routes/condo_castle_editor.py:554
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:554 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `save_layout` without auth dependency — server/routes/layouts.py:165
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/layouts.py:165 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `save_project_full` without auth dependency — server/routes/condo_castle_editor.py:272
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:272 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `set_autostart` without auth dependency — server/routes/layouts.py:150
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/layouts.py:150 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `set_nemo_binding` without auth dependency — server/routes/voice.py:164
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/voice.py:164 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_element` without auth dependency — server/routes/condo_castle_editor.py:519
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:519 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_family_member` without auth dependency — server/routes/condo_castle_security.py:350
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_security.py:350 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_floor` without auth dependency — server/routes/condo_castle_editor.py:416
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:416 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_gesture_config` without auth dependency — server/routes/vision.py:329
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/vision.py:329 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_node` without auth dependency — server/routes/homelab_map.py:316
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/homelab_map.py:316 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_opening` without auth dependency — server/routes/condo_castle_editor.py:605
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:605 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_project` without auth dependency — server/routes/condo_castle_editor.py:196
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:196 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_room` without auth dependency — server/routes/condo_castle_editor.py:462
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
server/routes/condo_castle_editor.py:462 securityAuth fastapi unauth mutation
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/c4c5143c-0431-46d5-b2e5-2719aec4a1e1/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/c4c5143c-0431-46d5-b2e5-2719aec4a1e1/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.