endor-api

Query Endor Labs findings, projects, packages, and OSS metrics via API endpoints.

2|Updated Feb 4, 2026
One-click install
npx skills add https://github.com/Endor-Solutions-Architecture/endor-solutions-claude-skills --skill endor-api
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: endor-api
Source: https://github.com/Endor-Solutions-Architecture/endor-solutions-claude-skills/tree/main/.claude/skills/endor-api
Command: npx skills add https://github.com/Endor-Solutions-Architecture/endor-solutions-claude-skills --skill endor-api

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill enables direct programmatic access to Endor Labs data via API endpoints, allowing automated querying of findings, projects, packages, and OSS metrics.

Core Features & Use Cases

  • Direct API access: Retrieve findings, list projects, fetch package versions, and access OSS metrics for analysis and reporting.
  • Workflow automation: Integrate Endor Labs data into CI/CD pipelines, dashboards, or automated security reports.
  • Use Case: Build a script that lists all findings in a namespace and exports them to JSON or CSV for trend analysis.

Quick Start

Use the MCP server configuration to query Endor Labs data via the provided endpoints and the endorctl CLI to list resources.

Frequently Asked Questions about endor-api

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I query Endor Labs security findings via API for automated reports?

API access to Endor Labs security findings is achieved through MCP tools and the endorctl CLI, enabling you to list and get resources with structured filters. It supports safe, read-only operations to retrieve findings, projects, packages, and OSS metrics for analysis.

Can I list projects and package versions using the endorctl CLI?

Yes, you can list projects and fetch package versions using the endorctl CLI. The Skill provides direct API access to retrieve these resources and apply structured filters for targeted querying within your automated workflows or dashboards.

Does the Endor Labs API support read-only operations for CI/CD pipeline integration?

Yes, the Endor Labs API supports safe, read-only operations designed for CI/CD pipeline integration. You can programmatically query findings, projects, packages, and OSS metrics to build automated security reports without modifying resources.

What is the best way to export Endor Labs findings to JSON or CSV for trend analysis?

The best way to export Endor Labs findings to JSON or CSV for trend analysis is to build a script using the MCP server configuration and endorctl CLI. This allows you to list all findings in a namespace and export the structured data programmatically.

Are there limitations when using MCP tools to retrieve OSS metrics from Endor Labs?

The MCP tools and endorctl CLI are designed for safe, read-only operations to retrieve OSS metrics, findings, and projects. Limitations include being restricted to querying existing data rather than modifying resources, making it unsuitable for active remediation tasks.