---
title: "GET /vlai/attack-techniques/catalog"
method: GET
path: "/vlai/attack-techniques/catalog"
tags: ["vlai"]
---

# GET /vlai/attack-techniques/catalog

`GET /vlai/attack-techniques/catalog`

## Request

- Base URL: `/api` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/api/vlai/attack-techniques/catalog`
- Auth: API key in header `X-API-KEY`

Every MITRE ATT&CK technique the bi-encoder similarity search can rank vulnerabilities for, sorted by id: the techniques the model was trained on (`in_vocabulary` true) and the other enterprise techniques, scored from their official ATT&CK text. Backs the technique index page.

## Response `200`

Success.

## Other responses

- `500`: Unexpected error.
- `502`: Bad content: Invalid response from ML-Gateway.
- `503`: Connection Error: Unable to reach ML-Gateway.

## Changes

- **2026-09-16** `659b36930291`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/changes/vlai/attack-techniques/catalog/get.md)

---

[API](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api.md) - [All operations](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/llms.txt) - [OpenAPI document](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/revisions/b4dedf027493?raw)