Vault health report — weak, reused, optionally breached passwords across items the human can see. Metadata only; never secrets. hibp=1 opts into k-anonymity breach lookup.

GET/v1/report

Authorization

AuthorizationBearer token (JWT) · headerrequired

Hydra JWT. Identity is the bound agent or a Keto member human. The host is not identity.

Query parameters

hibpstring

Opt into HaveIBeenPwned k-anonymity breach counts (5-char SHA-1 prefix only).

Allowed:1true

Responses

200Health report for the Bearer human's visible items

itemsintegerrequired

weakintegerrequired

reusedintegerrequired

pwnedintegerrequired

hibpstringrequired

Allowed:offokerror

findingsVaultReportFinding[]required

Show properties

Array of VaultReportFinding

item_idstringrequired

namestringrequired

kindstringrequired

uristring

weakstring[]

reusedinteger

pwnedintegerrequired

401missing or invalid Bearer

403not a human principal

Request

curl -X GET "https://veil.nyc/v1/report" \
  -H "Authorization: Bearer YOUR_TOKEN"

const response = await fetch("https://veil.nyc/v1/report", {
  method: "GET",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN"
  }
});

import requests

response = requests.get(
    "https://veil.nyc/v1/report",
    headers={
        "Authorization": "Bearer YOUR_TOKEN"
    },
)

Response

{
  "items": 0,
  "weak": 0,
  "reused": 0,
  "pwned": 0,
  "hibp": "off",
  "findings": [
    {
      "item_id": "string",
      "name": "string",
      "kind": "string",
      "uri": "string",
      "weak": [
        "string"
      ],
      "reused": 0,
      "pwned": 0
    }
  ]
}