---
title: "List taxonomy categories"
method: GET
path: "/api/v1/category"
tags: ["taxonomy"]
---

# List taxonomy categories

`GET /api/v1/category`

## Request

- Base URL: `https://api.enokilabs.ai`
- URL: `https://api.enokilabs.ai/api/v1/category`
- Auth: none declared

List the security categories an assessment run can be focused on, with the display name and description of each. The 'key' of each entry is exactly what the 'categories' field of POST /api/v1/run accepts; a key this endpoint did not return is rejected there with a 400. Use the descriptions to pick the categories relevant to a change instead of running the full taxonomy on every deploy.

Responses are static platform metadata, so a polling caller can cache one for an hour. Part of the platform plan: a trial workspace is refused with 403.

## Query parameters

- `lens` 'security' | 'safety' | 'compliance': Which part of the category list: security, safety or compliance.

## Headers

- `Authorization` string, nullable: Bearer token with API key

## Response `200`

Successful Response

- ApiCategoryListResponse: Response for GET /api/v1/category — one lens' active categories.
  - `categories` ApiCategory[], required: Active categories in the requested lens, sorted by key.
    - `key` string, required: Canonical category key. This is the exact value to pass in the 'categories' list when triggering a run.
    - `display_name` string, required: Short human-readable label.
    - `description` string, required: What this category tests for: the field to read when choosing which categories are relevant to a change.
  - `lens` 'security' | 'safety' | 'compliance', required: Which part of the category list: security, safety or compliance.

## Other responses

- `403`: Refused: the caller lacks the access the route needs, or the workspace is on a trial. Listing the test categories is part of the platform plan, and a trial is answered with the code `taxonomy_not_included`.
- `422`: Validation Error

---

[API](https://skmtc.dev/enokilabs/apis/enoki-external-api.md) · [All operations](https://skmtc.dev/enokilabs/apis/enoki-external-api/llms.txt) · [OpenAPI document](https://skmtc.dev/enokilabs/apis/enoki-external-api/revisions/9b13fb6ab124?raw)
