Skip to main content
GET
/
api
/
v1
/
attack-graph
/
overlay
Attack Graph Overlay
curl --request GET \
  --url http://localhost:8000/api/v1/attack-graph/overlay
{
  "compromised_nodes": [
    {
      "node_id": "<string>",
      "severity": "<string>",
      "risk_score": 123
    }
  ],
  "attack_edges": [
    {
      "source": "<string>",
      "target": "<string>",
      "rule_id": "<string>",
      "severity": "<string>"
    }
  ]
}
Builds the overlay data consumed by the dashboard’s Attack Surface topology mode: every node and edge that participates in at least one attack path, tagged with the highest severity seen.

​
Response

​
compromised_nodes
object[]
Array of compromised agent nodes (tool and ingress nodes are excluded):
​
attack_edges
object[]
Deduplicated edges that appear in at least one attack path: