Get the v3 framework taxonomy
curl --request GET \
--url https://api.webacy.com/v3/frameworkimport requests
url = "https://api.webacy.com/v3/framework"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('https://api.webacy.com/v3/framework', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.webacy.com/v3/framework",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.webacy.com/v3/framework"
req, _ := http.NewRequest("GET", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.webacy.com/v3/framework")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.webacy.com/v3/framework")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
response = http.request(request)
puts response.read_body{
"schema_version": "3.0",
"framework_version": "v1",
"supported_versions": [
"v1"
],
"supported_grading_schemes": [
"v1"
],
"categories": [
{
"key": "smart_contract",
"name": "Smart contract",
"description": "Code quality, verification, audits, upgradeability, and proxy structure of the contracts that custody user funds.",
"criteria": [
{
"key": "contract_verified",
"name": "Contract verified on explorer",
"live": true
},
{
"key": "formal_verification",
"name": "Formal verification",
"live": false,
"phase": "5"
}
]
}
]
}Vault Risk V3
Get vault risk data framework and taxonomy
Public methodology endpoint (no API key). Returns the full criteria taxonomy plus the supported framework / grading-scheme version lists. Unknown framework_version pins return 400 with the supported list. Cached 5 min.
GET
/
v3
/
framework
Get the v3 framework taxonomy
curl --request GET \
--url https://api.webacy.com/v3/frameworkimport requests
url = "https://api.webacy.com/v3/framework"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('https://api.webacy.com/v3/framework', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.webacy.com/v3/framework",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.webacy.com/v3/framework"
req, _ := http.NewRequest("GET", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.webacy.com/v3/framework")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.webacy.com/v3/framework")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
response = http.request(request)
puts response.read_body{
"schema_version": "3.0",
"framework_version": "v1",
"supported_versions": [
"v1"
],
"supported_grading_schemes": [
"v1"
],
"categories": [
{
"key": "smart_contract",
"name": "Smart contract",
"description": "Code quality, verification, audits, upgradeability, and proxy structure of the contracts that custody user funds.",
"criteria": [
{
"key": "contract_verified",
"name": "Contract verified on explorer",
"live": true
},
{
"key": "formal_verification",
"name": "Formal verification",
"live": false,
"phase": "5"
}
]
}
]
}This endpoint returns the canonical V3 risk framework — the seven categories and their criteria, with each criterion’s live/planned status.
Understanding the version numbers. Three independent version axes show up on the V3 surface — they are not the same number:
- API version
v3— the URL path (/v3/...) and the responseschema_version(3.0). framework_version— which criteria taxonomy was used.v1today (the only supported value).grading_scheme— which letter-grade band table is applied.v2is the default (the standard 11-band scale);v1is frozen and deprecated.
framework_version=v1 and grading_scheme=v2 by default. The v1 you may see on framework_version is not an older API — it’s just the current taxonomy version.Query Parameters
Framework version to pin (default v1).
Available options:
v1 Response
Framework taxonomy.
v3 framework taxonomy (RFC-019). The canonical machine-readable category/criteria catalog; Mintlify renders the methodology page from this.
