---
title: "GET /stats/scorecard/gnas"
method: GET
path: "/stats/scorecard/gnas"
tags: ["stats"]
---

# GET /stats/scorecard/gnas

`GET /stats/scorecard/gnas`

## Request

- Base URL: `/api` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/api/stats/scorecard/gnas`
- Auth: API key in header `X-API-KEY`

Returns the cross-GNA scorecard ranking.

## Query parameters

- `source` string
- `period` string
- `limit` integer
- `output` 'json' | 'markdown'

## Response `200`

Success.

- ScorecardGNARanking
  - `available` boolean: False when no GNA source has a prepared scorecard.
  - `period` string: window, all, or the publication year.
  - `ranking` ScorecardEntry[]: Ranked GNAs first, best first.
    - `assigner` string: The CNA short name, or the GNA source name.
    - `grade` string: A to E, from the mean score.
    - `ranked` boolean: False under the volume threshold: the score is shown, not ranked.
    - `records` integer: Published records scored in the period.
    - `score` number: Mean record score over the period, 0..100.
    - `source` string: The source the entry was read from (GNA ranking only).
  - `sources` string[]: The GNA sources the ranking was read from.

## Other responses

- `400`: The request could not be satisfied.

## Changes

- **2026-09-29** `5a0cc6b6fc1c`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/changes/stats/scorecard/gnas/get.md)

---

[API](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api.md) - [All operations](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/llms.txt) - [OpenAPI document](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/revisions/b4dedf027493?raw)