---
title: "Call-site hardening — decide taint paths through transitive deps, return a fix"
method: POST
path: "/v1/harden/analyze"
tags: ["harden"]
---

# Call-site hardening — decide taint paths through transitive deps, return a fix

`POST /v1/harden/analyze`

## Request

- Base URL: `https://vdb.ai.kr` (the document declares no server; this is the origin it was published from)
- URL: `https://vdb.ai.kr/v1/harden/analyze`
- Auth: none declared

Abstracted code representation + dependency manifest -> decided paths,
hardening fixes, and residual risk.

Source text is never accepted. Only the intermediate representation, with
identifiers, literals, and constants already stripped on the client.

## Request body

- HardenAnalyzeRequest
  - `ir` object, required
  - `manifest` string, required
  - `manifest_filename` string
  - `low_confidence_policy` string
  - `project` string, nullable
  - `as_user_id` string, nullable

## Response `200`

Successful Response

- object

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/vdb/apis/vdb-api.md) · [All operations](https://skmtc.dev/vdb/apis/vdb-api/llms.txt) · [OpenAPI document](https://skmtc.dev/vdb/apis/vdb-api/revisions/5d5edc23ea71?raw)