---
title: "Agent Smith coverage grid (admin console)."
method: GET
path: "/smith/coverage"
tags: ["Dojo"]
---

# Agent Smith coverage grid (admin console).

`GET /smith/coverage`

## Request

- Base URL: `https://api.mnemom.ai/v1`
- URL: `https://api.mnemom.ai/v1/smith/coverage`
- Auth: HTTP bearer

Returns the full 5×2 (tactic × surface) coverage grid for the /admin/agent-smith Coverage heatmap: per-cell technique count, stable count, weighted mean attack-success-rate (asr), and a derived strength signal. `asr` is null when a cell has no telemetry yet (honest — no fabricated 0.0). `?scenario=` scopes the metric roll-up to one scenario; absent → the global view. Admin-only. MNE-813.

## Query parameters

- `scenario` string

## Response `200`

The coverage grid.

- object
  - `scenario` string, nullable, required
  - `cells` object[], required
    - `tactic` 'pretext' | 'authority-spoof' | 'injection' | 'rationalized-destruction' | 'exfiltration', required
    - `tactic_order` integer, required
    - `target_surface` 'read' | 'write', required
    - `technique_count` integer, required
    - `stable_count` integer, required
    - `asr` number, nullable, required
    - `strength` number, required
    - `weak` boolean, required

## Other responses

- `401`: Authentication required
- `403`: Forbidden
- `429`: Rate-limit exceeded. The global per-IP limiter (100 requests/minute, applied to every `/v1/*` route) rejected this request. Back off until the window resets — `Retry-After` carries the cooldown in seconds and `X-RateLimit-Reset` the absolute reset time.
- `500`: Server error — request was well-formed but the server failed to fulfill it. Typically a downstream dependency (DB / RPC / external API) returned an unexpected error.

---

[API](https://skmtc.dev/mnemom/apis/mnemom-api.md) · [All operations](https://skmtc.dev/mnemom/apis/mnemom-api/llms.txt) · [OpenAPI document](https://skmtc.dev/mnemom/apis/mnemom-api/revisions/274b7a6ea182?raw)