Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

Zeed80/ai-docs

https://github.com/Zeed80/ai-docs · scanned 2026-06-16 01:12 UTC (2 months, 1 week ago)

546 raw signals (6 security + 540 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 523 actionable findings from 2 signal sources. 24 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
55.6
/100
Security checks
56
5 findings
System graph
56
100.0% cov · 518 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 283 Medium 39 Low 131 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 5 System graph 518 Crowd 0 Layer: Quality 93 Software 26 Frontend 60 Network 1 Hardware 7 Security 285 Cicd 1 Api 50
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 55.6/100 with 100.0% coverage. It contains 8137 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 540 findings — concentrated in security (285), quality (107), frontend (60). Risk profile is high: 0 critical, 281 high, 38 medium. Recommended next step: open the security layer findings first — that's where the highest-impact wins live.

Showing 451 of 523 actionable findings. 547 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high Security checks quality Practices conf 0.84 Foundry mined bad chains: Zeed80/ai-docs
Comment chain pattern product: bad_chains Repo: Zeed80/ai-docs Thread: Zeed80/ai-docs#2 Outcome: not_resolved_or_not_observed Thread label: thread_has_human_issue_without_fix_context Source graph label: source_backed_multi_signal_graph Reasons: source_graph_has_real_artifacts, source_graph_has_veri…
high Security checks quality Testing conf 0.78 Foundry mined test ci gap after feedback: Zeed80/ai-docs
Graph query export: Feedback exposes missing tests or CI Query id: test_ci_gap_after_feedback Query type: motif_query Intent: Hard negatives for feedback/fix chains without adequate guardrails. Motif: test_ci_gap_after_feedback Training usage: hard_negative Graph gold label: supported_by_verificati…
high System graph security auth conf 1.00 FastAPI DELETE `bulk_delete_drawings` without auth dependency — backend/app/api/drawings.py:204
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/drawings.py:204 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `bulk_delete_entries` without auth dependency — backend/app/api/tool_catalog.py:350
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tool_catalog.py:350 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `bulk_delete_invoices` without auth dependency — backend/app/api/invoices.py:570
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/invoices.py:570 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `bulk_delete_messages` without auth dependency — backend/app/api/email.py:508
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/email.py:508 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `bulk_delete_suppliers` without auth dependency — backend/app/api/suppliers.py:790
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/suppliers.py:790 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `cancel_draft_email` without auth dependency — backend/app/api/draft_email.py:281
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/draft_email.py:281 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `cancel_purchase_request` without auth dependency — backend/app/api/procurement.py:196
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/procurement.py:196 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `cancel_receipt` without auth dependency — backend/app/api/warehouse.py:700
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/warehouse.py:700 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `clear_workspace_blocks_endpoint` without auth dependency — backend/app/api/workspace.py:143
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/workspace.py:143 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_bom_line` without auth dependency — backend/app/api/boms.py:222
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/boms.py:222 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_canonical_item` without auth dependency — backend/app/api/canonical.py:166
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/canonical.py:166 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_department` without auth dependency — backend/app/api/admin.py:424
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/admin.py:424 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_document_hard` without auth dependency — backend/app/api/documents.py:1717
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:1717 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_document_link` without auth dependency — backend/app/api/documents.py:1439
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:1439 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_drawing` without auth dependency — backend/app/api/drawings.py:274
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/drawings.py:274 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_entry` without auth dependency — backend/app/api/tool_catalog.py:382
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tool_catalog.py:382 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_feature` without auth dependency — backend/app/api/drawings.py:917
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/drawings.py:917 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_inventory_item` without auth dependency — backend/app/api/warehouse.py:308
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/warehouse.py:308 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_invoice` without auth dependency — backend/app/api/invoices.py:534
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/invoices.py:534 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_mailbox` without auth dependency — backend/app/api/mailbox.py:213
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/mailbox.py:213 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_message` without auth dependency — backend/app/api/email.py:530
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/email.py:530 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_model` without auth dependency — backend/app/api/ai_settings.py:221
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/ai_settings.py:221 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_norm_card` without auth dependency — backend/app/api/normalization.py:473
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/normalization.py:473 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_ollama_model` without auth dependency — backend/app/api/local_models_api.py:519
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:519 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_provider` without auth dependency — backend/app/api/providers_api.py:237
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/providers_api.py:237 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_quarantine` without auth dependency — backend/app/api/quarantine.py:146
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/quarantine.py:146 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_rule` without auth dependency — backend/app/api/auto_approval.py:116
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/auto_approval.py:116 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_saved_query` without auth dependency — backend/app/api/search.py:364
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/search.py:364 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_saved_view` without auth dependency — backend/app/api/tables.py:643
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tables.py:643 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_supplier` without auth dependency — backend/app/api/suppliers.py:818
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/suppliers.py:818 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_supplier` without auth dependency — backend/app/api/tool_catalog.py:126
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tool_catalog.py:126 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_thread` without auth dependency — backend/app/api/email.py:547
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/email.py:547 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_token` without auth dependency — backend/app/api/local_models_api.py:930
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:930 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_workspace_block_endpoint` without auth dependency — backend/app/api/workspace.py:135
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/workspace.py:135 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `remove_from_allowlist` without auth dependency — backend/app/api/quarantine.py:217
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/quarantine.py:217 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `remove_item` without auth dependency — backend/app/api/collections.py:158
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/collections.py:158 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `remove_profile` without auth dependency — backend/app/api/local_models_api.py:669
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:669 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `remove_tool_binding` without auth dependency — backend/app/api/drawings.py:1134
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/drawings.py:1134 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `revoke_api_key` without auth dependency — backend/app/api/admin.py:642
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/admin.py:642 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `patch_agent_config` without auth dependency — backend/app/api/ai_settings.py:361
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/ai_settings.py:361 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `patch_provider_config` without auth dependency — backend/app/api/local_models_api.py:889
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:889 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `patch_tokens` without auth dependency — backend/app/api/local_models_api.py:915
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:915 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `set_drawing_status` without auth dependency — backend/app/api/drawings.py:451
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/drawings.py:451 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `set_model_preferred_instance` without auth dependency — backend/app/api/providers_api.py:553
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/providers_api.py:553 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `set_model_thinking` without auth dependency — backend/app/api/providers_api.py:537
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/providers_api.py:537 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_bom` without auth dependency — backend/app/api/boms.py:176
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/boms.py:176 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_canonical_item_classification` without auth dependency — backend/app/api/normalization.py:525
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/normalization.py:525 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_canonical_item` without auth dependency — backend/app/api/canonical.py:149
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/canonical.py:149 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_config` without auth dependency — backend/app/api/ai_settings.py:324
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/ai_settings.py:324 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_department` without auth dependency — backend/app/api/admin.py:390
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/admin.py:390 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_document_link` without auth dependency — backend/app/api/documents.py:1405
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:1405 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_document` without auth dependency — backend/app/api/documents.py:1315
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:1315 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_draft_email` without auth dependency — backend/app/api/draft_email.py:197
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/draft_email.py:197 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_drawing` without auth dependency — backend/app/api/drawings.py:181
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/drawings.py:181 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_entry` without auth dependency — backend/app/api/tool_catalog.py:323
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tool_catalog.py:323 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_feature` without auth dependency — backend/app/api/drawings.py:850
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/drawings.py:850 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_inventory_item` without auth dependency — backend/app/api/warehouse.py:288
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/warehouse.py:288 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_invoice_line` without auth dependency — backend/app/api/invoices.py:265
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/invoices.py:265 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_invoice` without auth dependency — backend/app/api/invoices.py:225
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/invoices.py:225 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_mailbox` without auth dependency — backend/app/api/mailbox.py:189
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/mailbox.py:189 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_norm_card` without auth dependency — backend/app/api/normalization.py:456
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/normalization.py:456 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_ntd_control_settings` without auth dependency — backend/app/api/ntd.py:102
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/ntd.py:102 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_payment_schedule` without auth dependency — backend/app/api/payments.py:209
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/payments.py:209 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_purchase_request` without auth dependency — backend/app/api/procurement.py:179
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/procurement.py:179 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_receipt_line` without auth dependency — backend/app/api/warehouse.py:617
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/warehouse.py:617 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_receipt_status` without auth dependency — backend/app/api/warehouse.py:662
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/warehouse.py:662 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_rule` without auth dependency — backend/app/api/auto_approval.py:99
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/auto_approval.py:99 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_supplier_contract` without auth dependency — backend/app/api/procurement.py:325
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/procurement.py:325 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_supplier` without auth dependency — backend/app/api/suppliers.py:643
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/suppliers.py:643 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_supplier` without auth dependency — backend/app/api/tool_catalog.py:106
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tool_catalog.py:106 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_telegram_config` without auth dependency — backend/app/api/telegram.py:204
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/telegram.py:204 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_tool_binding` without auth dependency — backend/app/api/drawings.py:1108
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/drawings.py:1108 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_user` without auth dependency — backend/app/api/admin.py:220
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/admin.py:220 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `activate_learning_rule` without auth dependency — backend/app/api/technology.py:916
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:916 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `activate_provider_model` without auth dependency — backend/app/api/local_models_api.py:543
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:543 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `activate_rule` without auth dependency — backend/app/api/normalization.py:146
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/normalization.py:146 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_bom_line` without auth dependency — backend/app/api/boms.py:203
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/boms.py:203 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_item` without auth dependency — backend/app/api/collections.py:107
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/collections.py:107 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_operation` without auth dependency — backend/app/api/technology.py:719
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:719 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_to_allowlist` without auth dependency — backend/app/api/quarantine.py:195
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/quarantine.py:195 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `adjust_stock` without auth dependency — backend/app/api/warehouse.py:379
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/warehouse.py:379 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `align_items` without auth dependency — backend/app/api/compare.py:101
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/compare.py:101 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `analyze_style` without auth dependency — backend/app/api/email.py:244
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/email.py:244 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `analyze_surfaces` without auth dependency — backend/app/api/technology.py:1426
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:1426 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `apply_hardware_preset` without auth dependency — backend/app/api/local_models_api.py:992
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:992 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `apply_rules` without auth dependency — backend/app/api/normalization.py:213
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/normalization.py:213 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `apply_stable_local_agent_preset` without auth dependency — backend/app/api/ai_settings.py:398
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/ai_settings.py:398 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `approve_bom` without auth dependency — backend/app/api/boms.py:243
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/boms.py:243 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `approve_norm_estimate` without auth dependency — backend/app/api/technology.py:782
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:782 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `approve_process_plan` without auth dependency — backend/app/api/technology.py:574
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:574 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `batch_action` without auth dependency — backend/app/api/tables.py:910
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tables.py:910 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `batch_classify_documents` without auth dependency — backend/app/api/documents.py:1131
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:1131 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `batch_process_documents` without auth dependency — backend/app/api/documents.py:1088
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:1088 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `batch_rebuild_document_memory` without auth dependency — backend/app/api/documents.py:1190
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:1190 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `batch_reindex_document_embeddings` without auth dependency — backend/app/api/documents.py:1165
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:1165 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `batch_run_ntd_checks` without auth dependency — backend/app/api/documents.py:1228
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:1228 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `benchmark_model` without auth dependency — backend/app/api/local_models_api.py:1028
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:1028 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `bind_tool` without auth dependency — backend/app/api/drawings.py:1048
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/drawings.py:1048 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `bootstrap_admin` without auth dependency — backend/app/api/setup.py:29
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/setup.py:29 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `bulk_approve_invoices` without auth dependency — backend/app/api/invoices.py:626
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/invoices.py:626 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `bulk_confirm_receipts` without auth dependency — backend/app/api/warehouse.py:508
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/warehouse.py:508 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `bulk_reanalyze_drawings` without auth dependency — backend/app/api/drawings.py:380
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/drawings.py:380 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `bulk_reject_invoices` without auth dependency — backend/app/api/invoices.py:656
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/invoices.py:656 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `bulk_resolve_anomalies` without auth dependency — backend/app/api/anomalies.py:379
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/anomalies.py:379 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `calculate_cutting_params` without auth dependency — backend/app/api/technology.py:1500
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:1500 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `check_all_anomalies` without auth dependency — backend/app/api/anomalies.py:45
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/anomalies.py:45 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `check_duplicate` without auth dependency — backend/app/api/suppliers.py:161
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/suppliers.py:161 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `check_invoice` without auth dependency — backend/app/api/auto_approval.py:129
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/auto_approval.py:129 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `check_requisites` without auth dependency — backend/app/api/suppliers.py:405
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/suppliers.py:405 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `classify_document` without auth dependency — backend/app/api/documents.py:1558
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:1558 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `close_collection` without auth dependency — backend/app/api/collections.py:182
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/collections.py:182 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `confirm_mapping` without auth dependency — backend/app/api/canonical.py:254
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/canonical.py:254 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `confirm_receipt` without auth dependency — backend/app/api/warehouse.py:637
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/warehouse.py:637 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `control_provider_server` without auth dependency — backend/app/api/local_models_api.py:942
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:942 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `correct_drawing_feature` without auth dependency — backend/app/api/drawings.py:606
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/drawings.py:606 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `correct_extraction_field` without auth dependency — backend/app/api/documents.py:1734
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:1734 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_agent_action` without auth dependency — backend/app/api/agent_actions.py:52
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/agent_actions.py:52 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_anomaly` without auth dependency — backend/app/api/anomalies.py:309
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/anomalies.py:309 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_api_key` without auth dependency — backend/app/api/admin.py:609
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/admin.py:609 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_approval_chain` without auth dependency — backend/app/api/approvals.py:224
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/approvals.py:224 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_bom` without auth dependency — backend/app/api/boms.py:132
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/boms.py:132 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_canonical_item` without auth dependency — backend/app/api/canonical.py:117
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/canonical.py:117 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_chunk` without auth dependency — backend/app/api/graph.py:236
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/graph.py:236 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_collection` without auth dependency — backend/app/api/collections.py:44
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/collections.py:44 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_department` without auth dependency — backend/app/api/admin.py:355
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/admin.py:355 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_draft_email` without auth dependency — backend/app/api/draft_email.py:114
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/draft_email.py:114 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_draft` without auth dependency — backend/app/api/email.py:148
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/email.py:148 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_edge` without auth dependency — backend/app/api/graph.py:89
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/graph.py:89 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_entry` without auth dependency — backend/app/api/tool_catalog.py:277
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tool_catalog.py:277 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_event` without auth dependency — backend/app/api/calendar.py:32
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/calendar.py:32 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_evidence` without auth dependency — backend/app/api/graph.py:251
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/graph.py:251 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_feature` without auth dependency — backend/app/api/drawings.py:784
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/drawings.py:784 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_inventory_item` without auth dependency — backend/app/api/warehouse.py:240
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/warehouse.py:240 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_learning_rule` without auth dependency — backend/app/api/technology.py:895
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:895 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_mailbox` without auth dependency — backend/app/api/mailbox.py:125
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/mailbox.py:125 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_mention` without auth dependency — backend/app/api/graph.py:268
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/graph.py:268 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_node` without auth dependency — backend/app/api/graph.py:47
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/graph.py:47 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_norm_card` without auth dependency — backend/app/api/normalization.py:426
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/normalization.py:426 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_norm_estimate` without auth dependency — backend/app/api/technology.py:750
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:750 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_normative_clause` without auth dependency — backend/app/api/ntd.py:371
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/ntd.py:371 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_normative_document_from_source` without auth dependency — backend/app/api/ntd.py:183
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/ntd.py:183 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_normative_document` without auth dependency — backend/app/api/ntd.py:141
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/ntd.py:141 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_normative_requirement` without auth dependency — backend/app/api/ntd.py:399
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/ntd.py:399 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_operation_template` without auth dependency — backend/app/api/technology.py:161
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:161 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_payment_schedule` without auth dependency — backend/app/api/payments.py:109
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/payments.py:109 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_process_plan` without auth dependency — backend/app/api/technology.py:206
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:206 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_provider` without auth dependency — backend/app/api/providers_api.py:165
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/providers_api.py:165 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_provider` without auth dependency — backend/app/api/providers_api.py:166
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/providers_api.py:166 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_purchase_request_from_bom` without auth dependency — backend/app/api/boms.py:343
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/boms.py:343 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_purchase_request` without auth dependency — backend/app/api/procurement.py:146
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/procurement.py:146 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_receipt` without auth dependency — backend/app/api/warehouse.py:540
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/warehouse.py:540 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_reminder` without auth dependency — backend/app/api/calendar.py:229
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/calendar.py:229 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_resource` without auth dependency — backend/app/api/technology.py:111
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:111 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_rule` without auth dependency — backend/app/api/auto_approval.py:77
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/auto_approval.py:77 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_rule` without auth dependency — backend/app/api/normalization.py:305
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/normalization.py:305 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_saved_query` without auth dependency — backend/app/api/search.py:344
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/search.py:344 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_saved_view` without auth dependency — backend/app/api/tables.py:610
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tables.py:610 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_session` without auth dependency — backend/app/api/compare.py:32
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/compare.py:32 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_supplier_contract` without auth dependency — backend/app/api/procurement.py:295
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/procurement.py:295 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_supplier` without auth dependency — backend/app/api/suppliers.py:174
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/suppliers.py:174 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_supplier` without auth dependency — backend/app/api/tool_catalog.py:50
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tool_catalog.py:50 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_user` without auth dependency — backend/app/api/admin.py:51
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/admin.py:51 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `deactivate_user` without auth dependency — backend/app/api/admin.py:307
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/admin.py:307 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `decide_ntd_finding` without auth dependency — backend/app/api/ntd.py:553
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/ntd.py:553 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `decide_review_item` without auth dependency — backend/app/api/graph.py:307
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/graph.py:307 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `decide` without auth dependency — backend/app/api/compare.py:183
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/compare.py:183 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `disable_rule` without auth dependency — backend/app/api/normalization.py:184
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/normalization.py:184 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `dispatch_capability` without auth dependency — backend/app/api/capability_router.py:368
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/capability_router.py:368 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `dispatch_vault` without auth dependency — backend/app/api/capability_router.py:345
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/capability_router.py:345 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `draft_process_plan_from_document` without auth dependency — backend/app/api/technology.py:244
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:244 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `estimate_process_plan_norms` without auth dependency — backend/app/api/technology.py:659
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:659 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `explain_memory` without auth dependency — backend/app/api/memory.py:766
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/memory.py:766 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `export_1c` without auth dependency — backend/app/api/tables.py:458
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tables.py:458 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `export_excel` without auth dependency — backend/app/api/tables.py:267
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tables.py:267 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `export_gost_forms` without auth dependency — backend/app/api/technology.py:1653
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:1653 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `export_invoice_1c` without auth dependency — backend/app/api/export.py:81
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/export.py:81 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `export_invoice_excel` without auth dependency — backend/app/api/export.py:42
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/export.py:42 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `export_workspace_block` without auth dependency — backend/app/api/workspace_export.py:25
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/workspace_export.py:25 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `extract_dates` without auth dependency — backend/app/api/calendar.py:82
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/calendar.py:82 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `extract_document` without auth dependency — backend/app/api/documents.py:1615
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:1615 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `fetch_new_emails` without auth dependency — backend/app/api/email.py:39
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/email.py:39 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_followup_draft` without auth dependency — backend/app/api/calendar.py:272
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/calendar.py:272 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_tp_from_drawing` without auth dependency — backend/app/api/technology.py:1364
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:1364 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `hybrid_search` without auth dependency — backend/app/api/search.py:215
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/search.py:215 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `import_excel` without auth dependency — backend/app/api/tables.py:661
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tables.py:661 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `index_active_memory_embeddings` without auth dependency — backend/app/api/memory.py:936
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/memory.py:936 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `index_normative_document` without auth dependency — backend/app/api/ntd.py:251
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/ntd.py:251 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `ingest_document` without auth dependency — backend/app/api/documents.py:469
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:469 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `inline_edit` without auth dependency — backend/app/api/tables.py:850
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tables.py:850 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `issue_stock` without auth dependency — backend/app/api/warehouse.py:338
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/warehouse.py:338 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `link_document` without auth dependency — backend/app/api/documents.py:1370
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:1370 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `mark_paid` without auth dependency — backend/app/api/payments.py:228
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/payments.py:228 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `mark_sent` without auth dependency — backend/app/api/calendar.py:314
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/calendar.py:314 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `nl_to_query` without auth dependency — backend/app/api/search.py:141
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/search.py:141 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `pin_memory_fact` without auth dependency — backend/app/api/memory.py:196
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/memory.py:196 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `prune_memory_facts` without auth dependency — backend/app/api/memory.py:233
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/memory.py:233 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `publish_general_block` without auth dependency — backend/app/api/workspace.py:724
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/workspace.py:724 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `publish_invoice_items_by_supplier_table` without auth dependency — backend/app/api/workspace.py:340
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/workspace.py:340 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `publish_invoice_items_grouped_table` without auth dependency — backend/app/api/workspace.py:283
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/workspace.py:283 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `publish_invoice_items_table` without auth dependency — backend/app/api/workspace.py:200
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/workspace.py:200 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `publish_invoice_pivot_table` without auth dependency — backend/app/api/workspace.py:539
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/workspace.py:539 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `publish_invoice_table` without auth dependency — backend/app/api/workspace.py:151
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/workspace.py:151 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `publish_sql_table` without auth dependency — backend/app/api/workspace.py:662
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/workspace.py:662 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `publish_to_canvas` without auth dependency — backend/app/api/canvas.py:64
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/canvas.py:64 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `pull_model` without auth dependency — backend/app/api/ai_settings.py:195
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/ai_settings.py:195 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `pull_ollama_model` without auth dependency — backend/app/api/local_models_api.py:491
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:491 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `rate_message` without auth dependency — backend/app/api/memory.py:1216
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/memory.py:1216 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `re_extract_invoice` without auth dependency — backend/app/api/invoices.py:133
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/invoices.py:133 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reanalyze_drawing` without auth dependency — backend/app/api/drawings.py:339
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/drawings.py:339 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `rebuild_active_memory_embeddings` without auth dependency — backend/app/api/memory.py:916
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/memory.py:916 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `rebuild_document_memory` without auth dependency — backend/app/api/documents.py:1666
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:1666 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `rebuild_memory_embeddings` without auth dependency — backend/app/api/memory.py:837
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/memory.py:837 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `receive_invoice` without auth dependency — backend/app/api/invoices.py:686
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/invoices.py:686 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `record_correction` without auth dependency — backend/app/api/technology.py:811
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:811 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `refresh_catalog` without auth dependency — backend/app/api/tool_catalog.py:212
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tool_catalog.py:212 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `refresh_models` without auth dependency — backend/app/api/providers_api.py:288
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/providers_api.py:288 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reindex_memory` without auth dependency — backend/app/api/memory.py:1012
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/memory.py:1012 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `release_quarantine` without auth dependency — backend/app/api/quarantine.py:97
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/quarantine.py:97 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reload_agent_config` without auth dependency — backend/app/api/scenarios.py:151
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/scenarios.py:151 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `request_approval` without auth dependency — backend/app/api/approvals.py:111
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/approvals.py:111 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reset_agent_config` without auth dependency — backend/app/api/ai_settings.py:460
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/ai_settings.py:460 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reset_routing` without auth dependency — backend/app/api/local_models_api.py:795
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:795 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `resolve_anomaly` without auth dependency — backend/app/api/anomalies.py:419
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/anomalies.py:419 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `resolve_normcontrol_check` without auth dependency — backend/app/api/technology.py:1548
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:1548 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `review_feature` without auth dependency — backend/app/api/drawings.py:885
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/drawings.py:885 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `risk_check` without auth dependency — backend/app/api/email.py:307
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/email.py:307 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_document_ntd_check` without auth dependency — backend/app/api/ntd.py:463
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/ntd.py:463 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_draft_risk_check` without auth dependency — backend/app/api/draft_email.py:307
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/draft_email.py:307 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_normcontrol` without auth dependency — backend/app/api/technology.py:1533
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:1533 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_ntd_check` without auth dependency — backend/app/api/ntd.py:513
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/ntd.py:513 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_scenario` without auth dependency — backend/app/api/scenarios.py:51
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/scenarios.py:51 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_skill` without auth dependency — infra/skill-runner/runner.py:56
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
infra/skill-runner/runner.py:56 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `save_profile` without auth dependency — backend/app/api/local_models_api.py:660
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:660 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `schedule_invoice_payment` without auth dependency — backend/app/api/payments.py:264
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/payments.py:264 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `search_documents` without auth dependency — backend/app/api/search.py:67
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/search.py:67 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `search_emails` without auth dependency — backend/app/api/email.py:64
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/email.py:64 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `search_memory` without auth dependency — backend/app/api/memory.py:96
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/memory.py:96 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `search_suppliers` without auth dependency — backend/app/api/suppliers.py:311
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/suppliers.py:311 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `select_equipment_for_op` without auth dependency — backend/app/api/technology.py:1468
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:1468 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `send_draft_email` without auth dependency — backend/app/api/draft_email.py:224
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/draft_email.py:224 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `send_email` without auth dependency — backend/app/api/email.py:404
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/email.py:404 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `send_rfq` without auth dependency — backend/app/api/procurement.py:212
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/procurement.py:212 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_blank_spec` without auth dependency — backend/app/api/technology.py:1572
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:1572 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_gpu_budget` without auth dependency — backend/app/api/local_models_api.py:315
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:315 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_user_password` without auth dependency — backend/app/api/admin.py:123
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/admin.py:123 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `smoke` without auth dependency — infra/skill-runner/runner.py:90
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
infra/skill-runner/runner.py:90 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `snooze_document` without auth dependency — backend/app/api/documents.py:1874
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:1874 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_model_download` without auth dependency — backend/app/api/local_models_api.py:578
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:578 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `store_chat_turn_memory` without auth dependency — backend/app/api/memory.py:162
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/memory.py:162 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `suggest_mapping` without auth dependency — backend/app/api/canonical.py:204
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/canonical.py:204 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `suggest_rules` without auth dependency — backend/app/api/normalization.py:73
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/normalization.py:73 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `suggest_template` without auth dependency — backend/app/api/email.py:484
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/email.py:484 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `summarize_collection` without auth dependency — backend/app/api/collections.py:220
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/collections.py:220 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `summarize_document` without auth dependency — backend/app/api/documents.py:1804
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/documents.py:1804 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `table_query` without auth dependency — backend/app/api/tables.py:82
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tables.py:82 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `telegram_notify` without auth dependency — backend/app/api/telegram.py:245
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/telegram.py:245 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `telegram_restart` without auth dependency — backend/app/api/telegram.py:228
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/telegram.py:228 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `telegram_stop` without auth dependency — backend/app/api/telegram.py:238
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/telegram.py:238 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `telegram_test` without auth dependency — backend/app/api/telegram.py:264
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/telegram.py:264 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `telemetry_reset` without auth dependency — backend/app/api/local_models_api.py:1011
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:1011 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `test_authentik_integration` without auth dependency — backend/app/api/admin.py:513
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/admin.py:513 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `test_mailbox` without auth dependency — backend/app/api/mailbox.py:226
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/mailbox.py:226 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `test_provider` without auth dependency — backend/app/api/providers_api.py:249
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/providers_api.py:249 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `unload_all_ollama` without auth dependency — backend/app/api/local_models_api.py:473
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:473 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `unload_ollama_model` without auth dependency — backend/app/api/local_models_api.py:480
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:480 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `update_task_profile` without auth dependency — backend/app/api/local_models_api.py:698
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:698 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_catalog_for_party` without auth dependency — backend/app/api/tool_catalog.py:699
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tool_catalog.py:699 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_catalog` without auth dependency — backend/app/api/tool_catalog.py:170
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/tool_catalog.py:170 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_drawing` without auth dependency — backend/app/api/drawings.py:70
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/drawings.py:70 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `validate_invoice` without auth dependency — backend/app/api/invoices.py:164
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/invoices.py:164 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `validate_process_plan` without auth dependency — backend/app/api/technology.py:615
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/technology.py:615 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `verify_workspace_block` without auth dependency — backend/app/api/workspace.py:111
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/workspace.py:111 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `set_agent_assignment` without auth dependency — backend/app/api/local_models_api.py:844
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:844 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `set_document_assignment` without auth dependency — backend/app/api/local_models_api.py:833
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:833 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `set_slot` without auth dependency — backend/app/api/providers_api.py:653
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/providers_api.py:653 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_authentik_integration` without auth dependency — backend/app/api/admin.py:488
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/admin.py:488 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_contours` without auth dependency — backend/app/api/drawings.py:971
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/drawings.py:971 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_provider` without auth dependency — backend/app/api/providers_api.py:209
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/providers_api.py:209 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_routing` without auth dependency — backend/app/api/local_models_api.py:780
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/app/api/local_models_api.py:780 securityAuth fastapi unauth mutation
medium Security checks quality Practices conf 0.62 2 occurrences Foundry mined assumption checks: Zeed80/ai-docs
Comment chain pattern product: assumption_checks Repo: Zeed80/ai-docs Thread: Zeed80/ai-docs#5 Outcome: claimed_resolved_unverified Thread label: thread_has_human_issue_and_fix_context Source graph label: source_backed_multi_signal_graph Reasons: source_graph_has_real_artifacts, source_graph_has_ve…
2 occurrences
repo-level (2 hits)
medium Security checks quality maintenance conf 0.70 2 occurrences Foundry mined blueprint gap alignment: Zeed80/ai-docs
Graph query export: Human feedback aligned with blueprint or architecture gaps Query id: blueprint_gap_alignment Query type: motif_query Intent: Curriculum-gap examples connecting issue threads to helicopter-view gaps. Motif: blueprint_gap_alignment Training usage: curriculum_gap Graph gold label: …
2 occurrences
repo-level (2 hits)
medium Security checks quality Practices conf 0.70 Foundry mined unresolved feedback: Zeed80/ai-docs
Graph query export: Human feedback without linked fix evidence Query id: unresolved_feedback Query type: motif_query Intent: Negative/unresolved examples that should not be hallucinated into fixes. Motif: unlinked_feedback_needs_evidence Training usage: negative_or_unresolved Graph gold label: need…
medium System graph frontend Frontend quality conf 1.00 `dangerouslySetInnerHTML` used in a React component — frontend/components/canvas/canvas-markdown.tsx:44
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
Fq dangerous html
medium System graph frontend Frontend quality conf 1.00 `dangerouslySetInnerHTML` used in a React component — frontend/components/drawings/DrawingViewer.tsx:253
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
Fq dangerous html
medium System graph frontend Frontend quality conf 1.00 `dangerouslySetInnerHTML` used in a React component — frontend/components/email/email-templates.tsx:496
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
Fq dangerous html
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — frontend/app/admin/api-keys/page.tsx:84
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — frontend/app/admin/users/[sub]/page.tsx:139
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — frontend/app/admin/users/page.tsx:231
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — frontend/app/approvals/page.tsx:110
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — frontend/app/catalogs/page.tsx:27
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — frontend/app/chat/[id]/page.tsx:65
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — frontend/app/compare/page.tsx:85
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — frontend/app/documents/[id]/page.tsx:421
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — frontend/app/email/[id]/page.tsx:57
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — frontend/app/payments/page.tsx:172
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — frontend/app/settings/models/page.tsx:356
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — frontend/app/settings/skills/page.tsx:78
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — frontend/app/suppliers/[id]/page.tsx:270
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness

Showing first 300 of 451. Refine filters or use the findings page for deep search.

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/ca6cc03c-0485-4518-bcb7-a6021a74c0a1/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/ca6cc03c-0485-4518-bcb7-a6021a74c0a1/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.