---
title: "FIPS 140-2 Exposure Checker"
method: POST
path: "/v1/tools/check_fips140_exposure"
tags: ["FIPS 140-2", "FIPS 140-3", "CMVP", "NIST", "historical", "procurement", "exposure", "post-quantum", "crypto-agility", "zero-PII"]
---

# FIPS 140-2 Exposure Checker

`POST /v1/tools/check_fips140_exposure`

## Request

- Base URL: `https://ainumbers.co`
- URL: `https://ainumbers.co/v1/tools/check_fips140_exposure`
- Auth: none declared

Flag FIPS 140-2/140-1 validated modules in a pasted certificate inventory against the pinned NIST CMVP Historical-list transition date (2026-09-21) and summarize resulting procurement exposure. Structural check over user-declared data only — not a live CMVP scan or cryptographic audit. Paste-mode. Zero egress. Zero PII.

**Tool URL:** https://ainumbers.co/tools/557-fips-140-2-exposure-checker.html
**AP2/Policy Mandate export:** yes

## Request body

- object
  - `inventory` unknown[], required: Array of {module_name, cert_number, standard} rows
    - unknown

## Response `200`

Successful tool execution result

- object
  - `exposed_count` integer, required
  - `current_count` integer, required
  - `unrecognized_count` integer
  - `findings` object[], required
    - `id` string
    - `module_name` string
    - `cert_number` string
    - `declared_standard` string, nullable
    - `status` 'exposed' | 'current' | 'unrecognized'
  - `receipt` object: OCG check receipt (policy_parameters, output_payload, execution_hash)

---

[API](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite.md) · [All operations](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/llms.txt) · [OpenAPI document](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/revisions/b462e4f5bb28?raw)