LOlovable
security-governance

Get workspace security insights

Changed on

Plan: Business or higher

Scope: workspaces:read

Prioritize security reviews across your workspace. Findings include public apps with security errors, unresolved personal data detections, projects shared with external collaborators, and projects whose owner is no longer an active workspace member.

Returns workspace project and membership counts, project review priorities, and finding types with matching project counts. Requires Security Center access. The review_priority filter applies only to findings; summary counts remain workspace-wide. Finding types requiring personal data detection access are omitted when that feature is unavailable. Project and membership data is eventually consistent and may not immediately reflect recent changes.

get/v1/workspaces/{workspace_id}/security-center/insights

Request

  • Base URL
    https://api.lovable.dev
  • Auth
    • API key in header Lovable-API-Key
    • or HTTP bearer

Path parameters

workspace_idstring required

ID of the workspace to retrieve security insights for.

Example:workspace_01jw3k9m2xq8r5v0c7d4e6f2gh

Query parameters

review_prioritystring[]

Filter finding types by review priority. Repeat to include any of the specified priorities; omit to include all. Only findings are filtered; summary counts remain workspace-wide.

[
  "needs_review"
]

Headers

Lovable-Versionstring

Stable API version to serve, as a YYYY-MM-DD date. Omit for the oldest supported stable version, currently 2026-09-11.

Lovable-Betastring

Comma-separated beta revision strings to enable on top of the stable version.

Response

OK

as_ofstring date-time nullable required

Timestamp indicating the freshness of workspace review-priority data. Individual projects may have newer results. Null when unavailable. This is not a security scan completion time.

Example response

{
  "as_of": "2026-01-15T09:30:00Z",
  "findings": [
    {
      "category": "exposure",
      "description": "Publicly published projects with error-level security findings.",
      "id": "public_security_exposure",
      "project_count": 12,
      "review_priority": "needs_review",
      "title": "Public app with security errors"
    }
  ],
  "summary": {
    "externally_published": {
      "delta_30d": 3,
      "delta_window": "30 days",
      "value": 42
    },
    "risk": {
      "needs_review": 3,
      "no_review_needed": 12,
      "review_recommended": 5
    },
    "total_projects": {
      "delta_30d": 3,
      "delta_window": "30 days",
      "value": 42
    },
    "workspace_members": {
      "delta_30d": 3,
      "delta_window": "30 days",
      "value": 42
    }
  }
}

Changes

  • a83f0776a896Revision changes
    • breaking

      removed the required property // from the response with the status

    • info

      for the header request parameter Lovable-Version, the format was generalized from date to no format

    • info

      added the non-success response with the status

    • info

      added the required property // to the response with the status

  • 63e95b862209Revision changes
    • info

      added the non-success response with the status