Enterprise code intelligence for M&A, security audits, and tech debt. Hosted server with 200k free.
| Endpoint | https://integrator.app.thecoderegistry.com/api/ai/router (streamable-http) |
|---|---|
| Registry version | 1.0.0 |
| Now | 23 tools · grade F (39) · pin ts_a1dcaa560b574767b36d20261e10dff7 · protocol 2025-11-25 |
| First / last listed | 2026-10-30 03:19 UTC / 2026-10-30 03:19 UTC |
| Grade over time | 2026-10-30: F (39), 23 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: create_account list_projects get_project create_project delete_project list_vaults get_vault create-code-vault reanalyze-code-vault delete-code-vault get-code-vault-summary get-code-vault-results get-code-vault-reports get_account delete_account rotate_api_key get-security-issues get-code-smells get-git-history get-contributors get-components get-code-iq-automated-queries get-the-code-score
create_account | Creates a new Code Registry account and returns API credentials. Required fields: email (account owner's email), name (account owner's full name), team_name (team or company name). All three must be provided or the call will fail. Cold starts can cause the first request to time out; retry with backoff. No API key required. params: email*, name*, team_name*, integrator_id, integrator_name |
list_projects | Lists all projects for the authenticated team. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments. params: api_key |
get_project | Returns a specific project by id. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments. params: project_id*, api_key |
create_project | Creates a project for a team user. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments. params: user_id*, name*, description, api_key |
delete_project | Deletes a project and its vaults. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments. params: project_id*, api_key |
list_vaults | Lists vaults within a project. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments. params: project_id*, api_key |
get_vault | Returns a specific vault by id. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments. params: vault_id*, api_key |
create-code-vault | Creates a code vault and queues the initial analysis. Choose source_type based on what is available in your environment: (1) LOCAL_AGENT — preferred when Docker is available; runs a local container, source code never leaves the machine. The response includes next_steps.commands that MUST be executed to start the agent. (2) FILE_ARCHIVE — use this when Docker is NOT available (e.g. sandboxed/browse params: project_id, user_id, name, source_type, source_url, username, password, branch, description, api_key |
reanalyze-code-vault | Creates a new analysis version for an existing code vault using its existing source settings. For LOCAL_AGENT, the response includes next_steps.commands and the local agent must be run again. For GIT/FILE_ARCHIVE, the re-analysis of the original code source is queued automatically. Note: summary/results/report tools always return the latest version only, so reanalysis replaces access to prior vers params: vault_id*, user_id, comment, author, api_key |
delete-code-vault | Deletes a code vault and related analysis data. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments. params: vault_id*, api_key |
get-code-vault-summary | Returns the latest version/status info for a vault. Analysis is async; if status is 'processing', poll with exponential backoff (5s, 10s, 20s, 40s, max 60s). Analysis can be as quick as 20-30 minutes for under 500,000 lines of code. Larger codebases can take much longer, especially with the security scan. This endpoint always returns the latest version only; once reanalysis starts, prior versions params: vault_id*, api_key |
get-code-vault-results | Returns analysis results for a vault. Free-tier teams receive summary-only results; paid teams receive full facet data and AI insights. Analysis is async; if status is 'processing', poll with exponential backoff (5s, 10s, 20s, 40s, max 60s). Analysis can be as quick as 20-30 minutes for under 500,000 lines of code. Larger codebases can take much longer, especially with the security scan. Facet mea params: vault_id*, api_key |
get-code-vault-reports | Returns report URLs (snapshot/comparison) for a vault. Completion rules: if version is 1.0.0, snapshot indicates completion and comparison is null; for versions above 1.0.0, comparison indicates completion. If not ready, retry with exponential backoff (5s, 10s, 20s, 40s, max 60s). This endpoint always returns the latest version only; once reanalysis starts, prior versions are no longer accessible params: vault_id*, api_key |
get_account | Returns the team owner account information. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments. params: api_key |
delete_account | Deletes the team account plus all projects and vaults. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments. params: confirm*, api_key |
rotate_api_key | Issues a fresh integrator API key. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments. params: integrator_id, integrator_name, api_key |
get-security-issues | Returns deduplicated security findings for a project (all vaults) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments. params: project_id, vault_id, severity, file, check_id, status, tag, issue_id, limit, offset, api_key |
get-code-smells | Returns code smell findings for a project (all vaults) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments. params: project_id, vault_id, issue_type, file, issue_id, limit, offset, api_key |
get-git-history | Returns git commit history for a project (all vaults) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments. params: project_id, vault_id, author, branch, date_from, date_to, limit, offset, api_key |
get-contributors | Returns aggregated contributor stats (commit count, lines added/deleted, first/last commit) for a project (all vaults) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments. params: project_id, vault_id, author, branch, date_from, date_to, limit, offset, api_key |
get-components | Returns detected open-source/CMS components for a project (all vaults) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments. params: project_id, vault_id, name, vendor, url, only_outdated, sort_by_size, limit, offset, api_key |
get-code-iq-automated-queries | Returns trimmed Code IQ automated analyses (architecture, scalability, EOL, AI functionality, etc.) for a project (aggregated) or a single vault. Excludes The Code Score — use get-the-code-score for that, and do not pass analysis_key=code_score here (404). Only cached results are returned; this never triggers a fresh analysis. Provide exactly one of project_id or vault_id. Requires full data acces params: project_id, vault_id, analysis_key, api_key |
get-the-code-score | Returns The Code Score (security/code-quality/dependencies, 1000 points) for a project (aggregated) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). If the plan doesn't include Code Score access, or it hasn't been generated yet, returns the same response shape with empty sections/priorities rather t params: project_id, vault_id, api_key |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.