---
title: "POST /vlai/attack-techniques"
method: POST
path: "/vlai/attack-techniques"
tags: ["vlai"]
---

# POST /vlai/attack-techniques

`POST /vlai/attack-techniques`

## Request

- Base URL: `/api` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/api/vlai/attack-techniques`
- Auth: API key in header `X-API-KEY`

Suggest MITRE ATT&CK techniques based on vulnerability descriptions.

## Request body

- object
  - `description` string: Description of the vulnerability.
  - `top_k` integer: Maximum number of ATT&CK techniques to return.

## Response `200`

Success.

## Other responses

- `401`: Authentication required (VLAI_CLASSIFICATION_REQUIRE_AUTH is on and no session, X-API-KEY or X-VLAI-Token was presented).
- `500`: Unexpected error.
- `502`: Bad content: Invalid response from ML-Gateway.
- `503`: Connection Error: Unable to reach ML-Gateway.

## Changes

- **2026-09-26** `f1cecf8dfc0e`: 1 info
  - added the non-success response with the status `401`
- **2026-09-11** `81405840063e`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/changes/vlai/attack-techniques/post.md)

---

[API](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api.md) - [All operations](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/llms.txt) - [OpenAPI document](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/revisions/b4dedf027493?raw)