---
title: "Legacy URL for the static capability coverage index"
method: GET
path: "/v1/security/score/{address}"
tags: ["Capabilities"]
---

# Legacy URL for the static capability coverage index

`GET /v1/security/score/{address}`

## Request

- Base URL: `https://api.m2msentinel.com`
- URL: `https://api.m2msentinel.com/v1/security/score/{address}`
- Auth: one of:
  - API key in header `x-api-key`
  - HTTP bearer
  - API key in header `PAYMENT-SIGNATURE`

Higher values mean fewer selected static patterns were observed. This is not a security score or safety probability. `capabilityScore` is null whenever evidence-grade analysis is unavailable.

## Path parameters

- `address` string, required

## Response `200`

Score and deduction breakdown

- ScoreResponse
  - `status` string, required
  - `address` string, required
  - `analysisKind` 'STATIC_BYTECODE_CAPABILITY_HEURISTIC', required
  - `notASafetyGuarantee` true, required
  - `reachability` 'NOT_ESTABLISHED', required
  - `limitations` string[], required
  - `capabilityScore` integer, nullable
  - `scoreBreakdown` object[]
    - `capability` string
    - `confidence` string
    - `points` integer
  - `scoreMeaning` string, nullable
  - `capabilityRating` string
  - `evidenceGrade` boolean
  - `verdict` Verdict
    - `capabilityRating` 'NO_SELECTED_CAPABILITIES_DETECTED' | 'REVIEW_RECOMMENDED' | 'MULTIPLE_FLAGS' | 'NOT_A_CONTRACT' | 'UNVERIFIED', required
    - `reachability` 'NOT_ESTABLISHED', required
    - `evidenceGrade` boolean, required: False when RPC trust or proxy resolution was insufficient to publish a capability label.
    - `reason` string, required
    - `explanation` string, required
    - `executableCapabilities` string[], required
  - `capabilitiesDetected` string[]
  - `provenance` Provenance: Where a value came from and how old it is. Present on every data response.
    - `source` string
    - `endpoint` string
    - `trustLevel` 'HIGH_TRUST_PRIMARY' | 'QUORUM_PUBLIC' | 'DEGRADED_LOW_TRUST'
    - `agreement` integer: Providers that returned the selected result.
    - `sampled` integer: Providers that answered at all.
    - `retrievedAt` string, date-time
    - `ageSeconds` integer
    - `network` string
    - `note` string, nullable

## Other responses

- `400`: Malformed input
- `401`: Missing or invalid credential, or a credential was supplied in the query string
- `402`: No credential supplied for a payable route, or the issuance-anchored 31-day credit allowance is exhausted
- `429`: A plan burst limit or bounded public/intent retry limit was exceeded
- `503`: A required dependency is unavailable; the request failed closed

---

[API](https://skmtc.dev/m2msentinel/apis/m2m-sentinel-base-contract-capability-checks-before-you-sign.md) · [All operations](https://skmtc.dev/m2msentinel/apis/m2m-sentinel-base-contract-capability-checks-before-you-sign/llms.txt) · [OpenAPI document](https://skmtc.dev/m2msentinel/apis/m2m-sentinel-base-contract-capability-checks-before-you-sign/revisions/2dadd4e704fd?raw)