Registry API
AI analysis
Run and read advisory AI analysis of package versions and ad-hoc assets.
AI analysis is opt-in per organization, rate-limited and advisory: an AI finding never gates, approves or changes a trust class. The same analysis backs `wl review`.
Operations
| Request | What it does |
|---|---|
| POST /api/v1/packages/{scope}/{name}/versions/{version}/analyze | Run on-demand AI analysis for a version (advisory-only, rate-limited) |
| GET /api/v1/packages/{scope}/{name}/versions/{version}/analysis | Get the latest AI analysis state for a version |
| POST /api/v1/packages/analyze-assets | Analyze ad-hoc (unpublished) assets — same opt-in + cost gates as published review |
Paths and summaries come from apps/api/openapi.json, which CI regenerates from the route definitions; this site checks its list against that file. Only the Public operations work without a token; everything else needs a signed-in session or an API token.