---
title: "Register an SBOM for continuous monitoring + email alerts"
method: POST
path: "/v1/sbom/watches"
tags: ["sbom"]
---

# Register an SBOM for continuous monitoring + email alerts

`POST /v1/sbom/watches`

## Request

- Base URL: `https://vdb.ai.kr` (the document declares no server; this is the origin it was published from)
- URL: `https://vdb.ai.kr/v1/sbom/watches`
- Auth: none declared

Register an SBOM / dependency file for continuous monitoring.

Accepts the same formats as `/v1/sbom/scan`. The parsed component
list is stored; a worker re-checks it against the vulnerability DB
every hour and emails the account address when a dependency matches
an advisory it hasn't reported before. Each (SBOM, vulnerability,
package) triple is emailed exactly once.

Multipart fields besides `file`:
  • `name`        — optional label shown in the list + email subject.
  • `as_user_id`  — internal-token callers only (web SSR).

Limits: 5 watches per account, 20,000 components per file.

## Response `200`

Successful Response

- SbomWatchMeta
  - `id` string, required
  - `name` string, required
  - `filename` string, required
  - `sbom_format` string, required
  - `component_count` integer, required
  - `lang` string, required
  - `active` boolean, required
  - `created_at` string, nullable, required
  - `last_checked_at` string, nullable, required
  - `notified_count` integer

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/vdb/apis/vdb-api.md) · [All operations](https://skmtc.dev/vdb/apis/vdb-api/llms.txt) · [OpenAPI document](https://skmtc.dev/vdb/apis/vdb-api/revisions/5d5edc23ea71?raw)