---
title: "One dashboard panel with its method and caveat"
method: GET
path: "/api/panels/{slug}.json"
---

# One dashboard panel with its method and caveat

`GET /api/panels/{slug}.json`

## Request

- Base URL: `https://cve-security.com`
- URL: `https://cve-security.com/api/panels/{slug}.json`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-API-Key`

The JSON payload behind one chart on /metrics (KEV listings per month, per year, the vendor matrix, catalog overlap, attention, cohort coverage, and so on), together with the method and caveat sentences that qualify it, the build stamp and the corpus size it was computed against. Dates are CISA KEV listing dates. Panels carrying VulnCheck data include the attribution string that must accompany them. Keyed; private-cacheable for 900s.

## Path parameters

- `slug` string, required

## Response `200`

{ slug, form, title, generated, corpus_total, method, caveat, attribution[], drilldown, source, data }

## Other responses

- `404`: Unknown slug; the body lists `available` slugs
- `503`: Not computed yet (builds nightly); Retry-After is set

---

[API](https://skmtc.dev/cve-security/apis/cve-security-api.md) · [All operations](https://skmtc.dev/cve-security/apis/cve-security-api/llms.txt) · [OpenAPI document](https://skmtc.dev/cve-security/apis/cve-security-api/revisions/2470f9c9a4eb?raw)
