Skip to main content
GET
/
v3
/
framework
Get the v3 framework taxonomy
curl --request GET \
  --url https://api.webacy.com/v3/framework
import requests

url = "https://api.webacy.com/v3/framework"

response = requests.get(url)

print(response.text)
const options = {method: 'GET'};

fetch('https://api.webacy.com/v3/framework', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));
<?php

$curl = curl_init();

curl_setopt_array($curl, [
CURLOPT_URL => "https://api.webacy.com/v3/framework",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}
package main

import (
"fmt"
"net/http"
"io"
)

func main() {

url := "https://api.webacy.com/v3/framework"

req, _ := http.NewRequest("GET", url, nil)

res, _ := http.DefaultClient.Do(req)

defer res.Body.Close()
body, _ := io.ReadAll(res.Body)

fmt.Println(string(body))

}
HttpResponse<String> response = Unirest.get("https://api.webacy.com/v3/framework")
.asString();
require 'uri'
require 'net/http'

url = URI("https://api.webacy.com/v3/framework")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body
{
  "schema_version": "3.0",
  "framework_version": "v1",
  "supported_versions": [
    "v1"
  ],
  "supported_grading_schemes": [
    "v1",
    "v2"
  ],
  "categories": [
    {
      "key": "smart_contract",
      "name": "Smart contract",
      "description": "Code quality, verification, audits, upgradeability, and proxy structure of the contracts that custody user funds.",
      "criteria": [
        {
          "key": "contract_verified",
          "name": "Contract verified on explorer",
          "live": true
        },
        {
          "key": "formal_verification",
          "name": "Formal verification",
          "live": false
        }
      ]
    }
  ]
}
This endpoint returns the canonical V3 risk framework — the seven categories and their criteria, with each criterion’s live/planned status.
Understanding the version numbers. Three independent version axes show up on the V3 surface — they are not the same number:
  • API version v3 — the URL path (/v3/...) and the response schema_version (3.0).
  • framework_version — which criteria taxonomy was used. v1 today (the only supported value).
  • grading_scheme — which letter-grade band table is applied. v2 is the default (the standard 11-band scale); v1 is frozen and deprecated.
So the V3 API uses framework_version=v1 and grading_scheme=v2 by default. The v1 you may see on framework_version is not an older API — it’s just the current taxonomy version.

Query Parameters

framework_version
enum<string>
default:v1

Framework version to pin (default v1).

Available options:
v1

Response

Framework taxonomy.

v3 framework taxonomy (RFC-019). The canonical machine-readable category/criteria catalog; Mintlify renders the methodology page from this.

schema_version
string
required
Example:

"3.0"

framework_version
string
required
Example:

"v1"

supported_versions
string[]
required
supported_grading_schemes
string[]
required
categories
object[]
required