---
title: "Parse SBOM/manifest → CycloneDX → OSV.dev CVE overlay → Knox-anchored risk score + FRE 902(13)/(14) affidavit"
method: POST
path: "/api/knox/sbom/illuminate"
tags: ["public"]
---

# Parse SBOM/manifest → CycloneDX → OSV.dev CVE overlay → Knox-anchored risk score + FRE 902(13)/(14) affidavit

`POST /api/knox/sbom/illuminate`

## Request

- Base URL: `https://bonissystems.com`
- URL: `https://bonissystems.com/api/knox/sbom/illuminate`
- Auth: none declared

## Request body

- SbomIlluminateRequest
  - `content` string, required: Raw manifest text (package.json, requirements.txt, pom.xml, SBOM JSON, etc.).
  - `sourceLabel` string
  - `sourceType` 'npm' | 'pypi' | 'maven' | 'cycloneDx' | 'spdx' | 'auto'

## Response `201`

Analysis complete, anchor minted.

## Other responses

- `400`: Invalid JSON or content missing.

---

[API](https://skmtc.dev/bonissystems/apis/knox-audit-permanence-primitive.md) · [All operations](https://skmtc.dev/bonissystems/apis/knox-audit-permanence-primitive/llms.txt) · [OpenAPI document](https://skmtc.dev/bonissystems/apis/knox-audit-permanence-primitive/revisions/acb182b9ec30?raw)