WordPress Fleet Intelligence API Documentation

Read supplied WordPress site inventories and compare plugin and theme versions with public release metadata without logging into sites. Payment is the exact USDC price on Base with x402.

{
  "text": "Site: S-1 | https://client.example | Client One | 6.4.3 | 8.1\nPlugin: S-1 | akismet | Akismet | 5.0.0 | active\nTheme: S-1 | twentytwentyfour | Twenty Twenty-Four | 1.0 | active\nCheck every admin panel.\n"
}

{
  "checkedAt": "2026-11-04T15:00:00.000Z",
  "status": "normalized",
  "sites": [
    {
      "id": "S-1",
      "url": "https://client.example",
      "name": "Client One",
      "wordpress": "6.4.3",
      "php": "8.1",
      "pluginCount": 1,
      "themeCount": 1,
      "interpretation": "stated"
    }
  ],
  "plugins": [
    {
      "siteId": "S-1",
      "slug": "akismet",
      "name": "Akismet",
      "version": "5.0.0",
      "active": true
    }
  ],
  "themes": [
    {
      "siteId": "S-1",
      "slug": "twentytwentyfour",
      "name": "Twenty Twenty-Four",
      "version": "1.0",
      "active": true
    }
  ],
  "requestsSent": 0,
  "siteAccessed": false,
  "updateInstalled": false,
  "updateSafe": false,
  "websiteModified": false,
  "vulnerabilityInvented": false,
  "findings": [
    {
      "kind": "ignored",
      "code": "unlabeled_line",
      "subject": "",
      "detail": "Lines without a recognized label were not read and their text was not copied."
    }
  ],
  "limitations": [
    "Site inventories, plugins, and themes are copied only from labeled fields supplied by the caller.",
    "Public release data comes from the caller or from one public WordPress.org metadata response per slug.",
    "An older version is a version-age warning. A vulnerability is listed only when the caller supplied it.",
    "An update is never marked safe. Matching a tested WordPress version is not proof that an update will work.",
    "No WordPress installation is logged into, updated, or modified."
  ]
}

curl -i -X POST "https://brainiac.software/api/v1/wordpress-fleet/site-inventory-normalize" \
  -H 'content-type: application/json' \
  -H 'Idempotency-Key: <fresh-64-character-random-hex-key>' \
  --data-binary @- <<'JSON'
{
  "text": "Site: S-1 | https://client.example | Client One | 6.4.3 | 8.1\nPlugin: S-1 | akismet | Akismet | 5.0.0 | active\nTheme: S-1 | twentytwentyfour | Twenty Twenty-Four | 1.0 | active\nCheck every admin panel.\n"
}
JSON

{
  "plugins": [
    {
      "siteId": "S-1",
      "slug": "akismet",
      "name": "Akismet",
      "version": "5.0.0",
      "active": true
    },
    {
      "siteId": "S-1",
      "slug": "hello-dolly",
      "name": "Hello Dolly",
      "version": "1.7.2",
      "active": true
    }
  ],
  "publicCatalog": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "version": "5.7.2",
      "requires": "5.8",
      "tested": "6.7",
      "requiresPhp": "7.2"
    },
    {
      "kind": "plugin",
      "slug": "hello-dolly",
      "version": "1.7.2",
      "requires": "4.6",
      "tested": "6.4",
      "requiresPhp": "5.6"
    }
  ],
  "vulnerabilities": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "fixedIn": "5.1.0",
      "cve": "CVE-EXAMPLE-1",
      "detail": "caller-supplied record"
    }
  ]
}

{
  "checkedAt": "2026-11-04T15:00:00.000Z",
  "status": "audited",
  "items": [
    {
      "siteId": "S-1",
      "slug": "akismet",
      "name": "Akismet",
      "installed": "5.0.0",
      "active": true,
      "publicVersion": "5.7.2",
      "publicSource": "caller",
      "retrievedAt": "",
      "age": "outdated",
      "comparison": "older",
      "knownVulnerability": true,
      "vulnerabilityConfirmed": false,
      "updateSafe": false,
      "cves": [
        "CVE-EXAMPLE-1"
      ],
      "requires": "5.8",
      "tested": "6.7",
      "requiresPhp": "7.2",
      "error": ""
    },
    {
      "siteId": "S-1",
      "slug": "hello-dolly",
      "name": "Hello Dolly",
      "installed": "1.7.2",
      "active": true,
      "publicVersion": "1.7.2",
      "publicSource": "caller",
      "retrievedAt": "",
      "age": "current",
      "comparison": "same",
      "knownVulnerability": false,
      "vulnerabilityConfirmed": false,
      "updateSafe": false,
      "cves": [],
      "requires": "4.6",
      "tested": "6.4",
      "requiresPhp": "5.6",
      "error": ""
    }
  ],
  "requestsSent": 0,
  "siteAccessed": false,
  "updateInstalled": false,
  "updateSafe": false,
  "websiteModified": false,
  "vulnerabilityInvented": false,
  "findings": [],
  "limitations": [
    "Site inventories, plugins, and themes are copied only from labeled fields supplied by the caller.",
    "Public release data comes from the caller or from one public WordPress.org metadata response per slug.",
    "An older version is a version-age warning. A vulnerability is listed only when the caller supplied it.",
    "An update is never marked safe. Matching a tested WordPress version is not proof that an update will work.",
    "No WordPress installation is logged into, updated, or modified."
  ]
}

curl -i -X POST "https://brainiac.software/api/v1/wordpress-fleet/plugin-version-audit" \
  -H 'content-type: application/json' \
  -H 'Idempotency-Key: <fresh-64-character-random-hex-key>' \
  --data-binary @- <<'JSON'
{
  "plugins": [
    {
      "siteId": "S-1",
      "slug": "akismet",
      "name": "Akismet",
      "version": "5.0.0",
      "active": true
    },
    {
      "siteId": "S-1",
      "slug": "hello-dolly",
      "name": "Hello Dolly",
      "version": "1.7.2",
      "active": true
    }
  ],
  "publicCatalog": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "version": "5.7.2",
      "requires": "5.8",
      "tested": "6.7",
      "requiresPhp": "7.2"
    },
    {
      "kind": "plugin",
      "slug": "hello-dolly",
      "version": "1.7.2",
      "requires": "4.6",
      "tested": "6.4",
      "requiresPhp": "5.6"
    }
  ],
  "vulnerabilities": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "fixedIn": "5.1.0",
      "cve": "CVE-EXAMPLE-1",
      "detail": "caller-supplied record"
    }
  ]
}
JSON

{
  "themes": [
    {
      "siteId": "S-1",
      "slug": "twentytwentyfour",
      "name": "Twenty Twenty-Four",
      "version": "1.0",
      "active": true
    }
  ],
  "publicCatalog": [
    {
      "kind": "theme",
      "slug": "twentytwentyfour",
      "version": "1.3",
      "requires": "6.4",
      "requiresPhp": "7.0"
    }
  ]
}

{
  "checkedAt": "2026-11-04T15:00:00.000Z",
  "status": "audited",
  "items": [
    {
      "siteId": "S-1",
      "slug": "twentytwentyfour",
      "name": "Twenty Twenty-Four",
      "installed": "1.0",
      "active": true,
      "publicVersion": "1.3",
      "publicSource": "caller",
      "retrievedAt": "",
      "age": "outdated",
      "comparison": "older",
      "knownVulnerability": false,
      "vulnerabilityConfirmed": false,
      "updateSafe": false,
      "cves": [],
      "requires": "6.4",
      "tested": "",
      "requiresPhp": "7.0",
      "error": ""
    }
  ],
  "requestsSent": 0,
  "siteAccessed": false,
  "updateInstalled": false,
  "updateSafe": false,
  "websiteModified": false,
  "vulnerabilityInvented": false,
  "findings": [],
  "limitations": [
    "Site inventories, plugins, and themes are copied only from labeled fields supplied by the caller.",
    "Public release data comes from the caller or from one public WordPress.org metadata response per slug.",
    "An older version is a version-age warning. A vulnerability is listed only when the caller supplied it.",
    "An update is never marked safe. Matching a tested WordPress version is not proof that an update will work.",
    "No WordPress installation is logged into, updated, or modified."
  ]
}

curl -i -X POST "https://brainiac.software/api/v1/wordpress-fleet/theme-version-audit" \
  -H 'content-type: application/json' \
  -H 'Idempotency-Key: <fresh-64-character-random-hex-key>' \
  --data-binary @- <<'JSON'
{
  "themes": [
    {
      "siteId": "S-1",
      "slug": "twentytwentyfour",
      "name": "Twenty Twenty-Four",
      "version": "1.0",
      "active": true
    }
  ],
  "publicCatalog": [
    {
      "kind": "theme",
      "slug": "twentytwentyfour",
      "version": "1.3",
      "requires": "6.4",
      "requiresPhp": "7.0"
    }
  ]
}
JSON

{
  "sites": [
    {
      "id": "S-1",
      "wordpress": "6.0",
      "php": "7.0"
    }
  ],
  "plugins": [
    {
      "siteId": "S-1",
      "slug": "akismet",
      "version": "5.0.0",
      "active": true
    }
  ],
  "publicCatalog": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "version": "5.7.2",
      "requires": "5.8",
      "tested": "6.7",
      "requiresPhp": "7.2"
    }
  ]
}

{
  "checkedAt": "2026-11-04T15:00:00.000Z",
  "status": "checked",
  "items": [
    {
      "siteId": "S-1",
      "kind": "plugin",
      "slug": "akismet",
      "installed": "5.0.0",
      "siteWordpress": "6.0",
      "sitePhp": "7.0",
      "requires": "5.8",
      "tested": "6.7",
      "requiresPhp": "7.2",
      "wordpressState": "meets",
      "phpState": "below",
      "testedState": "within_tested",
      "updateSafe": false,
      "evidence": "public_metadata"
    }
  ],
  "requestsSent": 0,
  "siteAccessed": false,
  "updateInstalled": false,
  "updateSafe": false,
  "websiteModified": false,
  "vulnerabilityInvented": false,
  "findings": [],
  "limitations": [
    "Site inventories, plugins, and themes are copied only from labeled fields supplied by the caller.",
    "Public release data comes from the caller or from one public WordPress.org metadata response per slug.",
    "An older version is a version-age warning. A vulnerability is listed only when the caller supplied it.",
    "An update is never marked safe. Matching a tested WordPress version is not proof that an update will work.",
    "No WordPress installation is logged into, updated, or modified."
  ]
}

curl -i -X POST "https://brainiac.software/api/v1/wordpress-fleet/update-compatibility-check" \
  -H 'content-type: application/json' \
  -H 'Idempotency-Key: <fresh-64-character-random-hex-key>' \
  --data-binary @- <<'JSON'
{
  "sites": [
    {
      "id": "S-1",
      "wordpress": "6.0",
      "php": "7.0"
    }
  ],
  "plugins": [
    {
      "siteId": "S-1",
      "slug": "akismet",
      "version": "5.0.0",
      "active": true
    }
  ],
  "publicCatalog": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "version": "5.7.2",
      "requires": "5.8",
      "tested": "6.7",
      "requiresPhp": "7.2"
    }
  ]
}
JSON

{
  "sites": [
    {
      "id": "S-1"
    }
  ],
  "plugins": [
    {
      "siteId": "S-1",
      "slug": "cache-a",
      "version": "1.0",
      "active": true
    },
    {
      "siteId": "S-1",
      "slug": "cache-b",
      "version": "1.0",
      "active": true
    },
    {
      "siteId": "S-1",
      "slug": "cache-a",
      "version": "1.1",
      "active": true
    }
  ],
  "conflicts": [
    {
      "left": "cache-a",
      "right": "cache-b",
      "detail": "caller says these caches conflict"
    }
  ]
}

{
  "checkedAt": "2026-11-04T15:00:00.000Z",
  "status": "detected",
  "items": [
    {
      "siteId": "S-1",
      "left": "cache-a",
      "right": "cache-a",
      "code": "duplicate_active",
      "confirmed": false,
      "detail": "The same plugin slug is active more than once on this site. This is not a confirmed runtime conflict."
    },
    {
      "siteId": "S-1",
      "left": "cache-a",
      "right": "cache-b",
      "code": "caller_rule",
      "confirmed": false,
      "detail": "caller says these caches conflict"
    }
  ],
  "requestsSent": 0,
  "siteAccessed": false,
  "updateInstalled": false,
  "updateSafe": false,
  "websiteModified": false,
  "vulnerabilityInvented": false,
  "findings": [],
  "limitations": [
    "Site inventories, plugins, and themes are copied only from labeled fields supplied by the caller.",
    "Public release data comes from the caller or from one public WordPress.org metadata response per slug.",
    "An older version is a version-age warning. A vulnerability is listed only when the caller supplied it.",
    "An update is never marked safe. Matching a tested WordPress version is not proof that an update will work.",
    "No WordPress installation is logged into, updated, or modified."
  ]
}

curl -i -X POST "https://brainiac.software/api/v1/wordpress-fleet/plugin-conflict-detect" \
  -H 'content-type: application/json' \
  -H 'Idempotency-Key: <fresh-64-character-random-hex-key>' \
  --data-binary @- <<'JSON'
{
  "sites": [
    {
      "id": "S-1"
    }
  ],
  "plugins": [
    {
      "siteId": "S-1",
      "slug": "cache-a",
      "version": "1.0",
      "active": true
    },
    {
      "siteId": "S-1",
      "slug": "cache-b",
      "version": "1.0",
      "active": true
    },
    {
      "siteId": "S-1",
      "slug": "cache-a",
      "version": "1.1",
      "active": true
    }
  ],
  "conflicts": [
    {
      "left": "cache-a",
      "right": "cache-b",
      "detail": "caller says these caches conflict"
    }
  ]
}
JSON

{
  "sites": [
    {
      "id": "S-1",
      "name": "Client One",
      "wordpress": "6.0",
      "php": "7.0"
    },
    {
      "id": "S-2",
      "name": "Client Two",
      "wordpress": "6.7",
      "php": "8.2"
    }
  ],
  "plugins": [
    {
      "siteId": "S-1",
      "slug": "akismet",
      "version": "5.0.0",
      "active": true
    },
    {
      "siteId": "S-2",
      "slug": "akismet",
      "version": "5.7.2",
      "active": true
    }
  ],
  "publicCatalog": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "version": "5.7.2",
      "requires": "5.8",
      "tested": "6.7",
      "requiresPhp": "7.2"
    }
  ],
  "vulnerabilities": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "fixedIn": "5.1.0",
      "cve": "CVE-EXAMPLE-1"
    }
  ]
}

{
  "checkedAt": "2026-11-04T15:00:00.000Z",
  "status": "prioritized",
  "sites": [
    {
      "siteId": "S-1",
      "name": "Client One",
      "url": "",
      "outdatedCount": 1,
      "knownVulnerabilityCount": 1,
      "compatibilityIssueCount": 1,
      "conflictCount": 0,
      "level": "high",
      "updateSafe": false,
      "vulnerabilityConfirmed": false
    },
    {
      "siteId": "S-2",
      "name": "Client Two",
      "url": "",
      "outdatedCount": 0,
      "knownVulnerabilityCount": 0,
      "compatibilityIssueCount": 0,
      "conflictCount": 0,
      "level": "none",
      "updateSafe": false,
      "vulnerabilityConfirmed": false
    }
  ],
  "requestsSent": 0,
  "siteAccessed": false,
  "updateInstalled": false,
  "updateSafe": false,
  "websiteModified": false,
  "vulnerabilityInvented": false,
  "findings": [],
  "limitations": [
    "Site inventories, plugins, and themes are copied only from labeled fields supplied by the caller.",
    "Public release data comes from the caller or from one public WordPress.org metadata response per slug.",
    "An older version is a version-age warning. A vulnerability is listed only when the caller supplied it.",
    "An update is never marked safe. Matching a tested WordPress version is not proof that an update will work.",
    "No WordPress installation is logged into, updated, or modified."
  ]
}

curl -i -X POST "https://brainiac.software/api/v1/wordpress-fleet/site-maintenance-priority" \
  -H 'content-type: application/json' \
  -H 'Idempotency-Key: <fresh-64-character-random-hex-key>' \
  --data-binary @- <<'JSON'
{
  "sites": [
    {
      "id": "S-1",
      "name": "Client One",
      "wordpress": "6.0",
      "php": "7.0"
    },
    {
      "id": "S-2",
      "name": "Client Two",
      "wordpress": "6.7",
      "php": "8.2"
    }
  ],
  "plugins": [
    {
      "siteId": "S-1",
      "slug": "akismet",
      "version": "5.0.0",
      "active": true
    },
    {
      "siteId": "S-2",
      "slug": "akismet",
      "version": "5.7.2",
      "active": true
    }
  ],
  "publicCatalog": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "version": "5.7.2",
      "requires": "5.8",
      "tested": "6.7",
      "requiresPhp": "7.2"
    }
  ],
  "vulnerabilities": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "fixedIn": "5.1.0",
      "cve": "CVE-EXAMPLE-1"
    }
  ]
}
JSON

{
  "sites": [
    {
      "id": "S-1",
      "wordpress": "6.0",
      "php": "7.0"
    }
  ],
  "plugins": [
    {
      "siteId": "S-1",
      "slug": "akismet",
      "version": "5.0.0",
      "active": true
    }
  ],
  "themes": [
    {
      "siteId": "S-1",
      "slug": "twentytwentyfour",
      "version": "1.0",
      "active": true
    }
  ],
  "publicCatalog": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "version": "5.7.2",
      "requires": "5.8",
      "tested": "6.7",
      "requiresPhp": "7.2"
    },
    {
      "kind": "theme",
      "slug": "twentytwentyfour",
      "version": "1.3",
      "requires": "6.4",
      "requiresPhp": "7.0"
    }
  ],
  "vulnerabilities": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "fixedIn": "5.1.0",
      "cve": "CVE-EXAMPLE-1"
    }
  ]
}

{
  "checkedAt": "2026-11-04T15:00:00.000Z",
  "status": "analyzed",
  "level": "review",
  "outdatedCount": 2,
  "knownVulnerabilityCount": 1,
  "highPrioritySites": 1,
  "signals": [
    {
      "code": "version_age",
      "kind": "warning",
      "confirmed": false,
      "count": 2,
      "detail": "Installed software is behind a supplied or WordPress.org public version. This is a version-age warning, not a confirmed vulnerability."
    },
    {
      "code": "caller_vulnerability",
      "kind": "indicator",
      "confirmed": false,
      "count": 1,
      "detail": "Caller-supplied vulnerability records match installed versions below the stated fixed version. The match is not independently verified."
    }
  ],
  "requestsSent": 0,
  "siteAccessed": false,
  "updateInstalled": false,
  "updateSafe": false,
  "websiteModified": false,
  "vulnerabilityInvented": false,
  "findings": [],
  "limitations": [
    "Site inventories, plugins, and themes are copied only from labeled fields supplied by the caller.",
    "Public release data comes from the caller or from one public WordPress.org metadata response per slug.",
    "An older version is a version-age warning. A vulnerability is listed only when the caller supplied it.",
    "An update is never marked safe. Matching a tested WordPress version is not proof that an update will work.",
    "No WordPress installation is logged into, updated, or modified."
  ]
}

curl -i -X POST "https://brainiac.software/api/v1/wordpress-fleet/risk-analyze" \
  -H 'content-type: application/json' \
  -H 'Idempotency-Key: <fresh-64-character-random-hex-key>' \
  --data-binary @- <<'JSON'
{
  "sites": [
    {
      "id": "S-1",
      "wordpress": "6.0",
      "php": "7.0"
    }
  ],
  "plugins": [
    {
      "siteId": "S-1",
      "slug": "akismet",
      "version": "5.0.0",
      "active": true
    }
  ],
  "themes": [
    {
      "siteId": "S-1",
      "slug": "twentytwentyfour",
      "version": "1.0",
      "active": true
    }
  ],
  "publicCatalog": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "version": "5.7.2",
      "requires": "5.8",
      "tested": "6.7",
      "requiresPhp": "7.2"
    },
    {
      "kind": "theme",
      "slug": "twentytwentyfour",
      "version": "1.3",
      "requires": "6.4",
      "requiresPhp": "7.0"
    }
  ],
  "vulnerabilities": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "fixedIn": "5.1.0",
      "cve": "CVE-EXAMPLE-1"
    }
  ]
}
JSON

{
  "sites": [
    {
      "id": "S-1",
      "url": "https://client.example",
      "name": "Client One",
      "wordpress": "6.0",
      "php": "7.0"
    }
  ],
  "plugins": [
    {
      "siteId": "S-1",
      "slug": "akismet",
      "name": "Akismet",
      "version": "5.0.0",
      "active": true
    },
    {
      "siteId": "S-1",
      "slug": "cache-a",
      "version": "1.0",
      "active": true
    },
    {
      "siteId": "S-1",
      "slug": "cache-b",
      "version": "1.0",
      "active": true
    }
  ],
  "themes": [
    {
      "siteId": "S-1",
      "slug": "twentytwentyfour",
      "name": "Twenty Twenty-Four",
      "version": "1.0",
      "active": true
    }
  ],
  "publicCatalog": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "version": "5.7.2",
      "requires": "5.8",
      "tested": "6.7",
      "requiresPhp": "7.2"
    },
    {
      "kind": "theme",
      "slug": "twentytwentyfour",
      "version": "1.3",
      "requires": "6.4",
      "requiresPhp": "7.0"
    }
  ],
  "vulnerabilities": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "fixedIn": "5.1.0",
      "cve": "CVE-EXAMPLE-1"
    }
  ],
  "conflicts": [
    {
      "left": "cache-a",
      "right": "cache-b",
      "detail": "caller says these caches conflict"
    }
  ]
}

{
  "checkedAt": "2026-11-04T15:00:00.000Z",
  "status": "reported",
  "siteCount": 1,
  "pluginCount": 3,
  "themeCount": 1,
  "outdatedCount": 2,
  "knownVulnerabilityCount": 1,
  "conflictCount": 1,
  "highPrioritySites": 1,
  "level": "review",
  "sites": [
    {
      "id": "S-1",
      "url": "https://client.example",
      "name": "Client One",
      "wordpress": "6.0",
      "php": "7.0",
      "pluginCount": 3,
      "themeCount": 1,
      "interpretation": "stated"
    }
  ],
  "plugins": [
    {
      "siteId": "S-1",
      "slug": "akismet",
      "name": "Akismet",
      "installed": "5.0.0",
      "active": true,
      "publicVersion": "5.7.2",
      "publicSource": "caller",
      "retrievedAt": "",
      "age": "outdated",
      "comparison": "older",
      "knownVulnerability": true,
      "vulnerabilityConfirmed": false,
      "updateSafe": false,
      "cves": [
        "CVE-EXAMPLE-1"
      ],
      "requires": "5.8",
      "tested": "6.7",
      "requiresPhp": "7.2",
      "error": ""
    },
    {
      "siteId": "S-1",
      "slug": "cache-a",
      "name": "cache-a",
      "installed": "1.0",
      "active": true,
      "publicVersion": "",
      "publicSource": "",
      "retrievedAt": "",
      "age": "not_checked",
      "comparison": "not_checked",
      "knownVulnerability": false,
      "vulnerabilityConfirmed": false,
      "updateSafe": false,
      "cves": [],
      "requires": "",
      "tested": "",
      "requiresPhp": "",
      "error": ""
    },
    {
      "siteId": "S-1",
      "slug": "cache-b",
      "name": "cache-b",
      "installed": "1.0",
      "active": true,
      "publicVersion": "",
      "publicSource": "",
      "retrievedAt": "",
      "age": "not_checked",
      "comparison": "not_checked",
      "knownVulnerability": false,
      "vulnerabilityConfirmed": false,
      "updateSafe": false,
      "cves": [],
      "requires": "",
      "tested": "",
      "requiresPhp": "",
      "error": ""
    }
  ],
  "themes": [
    {
      "siteId": "S-1",
      "slug": "twentytwentyfour",
      "name": "Twenty Twenty-Four",
      "installed": "1.0",
      "active": true,
      "publicVersion": "1.3",
      "publicSource": "caller",
      "retrievedAt": "",
      "age": "outdated",
      "comparison": "older",
      "knownVulnerability": false,
      "vulnerabilityConfirmed": false,
      "updateSafe": false,
      "cves": [],
      "requires": "6.4",
      "tested": "",
      "requiresPhp": "7.0",
      "error": ""
    }
  ],
  "compatibility": [
    {
      "siteId": "S-1",
      "kind": "plugin",
      "slug": "akismet",
      "installed": "5.0.0",
      "siteWordpress": "6.0",
      "sitePhp": "7.0",
      "requires": "5.8",
      "tested": "6.7",
      "requiresPhp": "7.2",
      "wordpressState": "meets",
      "phpState": "below",
      "testedState": "within_tested",
      "updateSafe": false,
      "evidence": "public_metadata"
    },
    {
      "siteId": "S-1",
      "kind": "plugin",
      "slug": "cache-a",
      "installed": "1.0",
      "siteWordpress": "6.0",
      "sitePhp": "7.0",
      "requires": "",
      "tested": "",
      "requiresPhp": "",
      "wordpressState": "not_checked",
      "phpState": "not_checked",
      "testedState": "not_checked",
      "updateSafe": false,
      "evidence": "none"
    },
    {
      "siteId": "S-1",
      "kind": "plugin",
      "slug": "cache-b",
      "installed": "1.0",
      "siteWordpress": "6.0",
      "sitePhp": "7.0",
      "requires": "",
      "tested": "",
      "requiresPhp": "",
      "wordpressState": "not_checked",
      "phpState": "not_checked",
      "testedState": "not_checked",
      "updateSafe": false,
      "evidence": "none"
    },
    {
      "siteId": "S-1",
      "kind": "theme",
      "slug": "twentytwentyfour",
      "installed": "1.0",
      "siteWordpress": "6.0",
      "sitePhp": "7.0",
      "requires": "6.4",
      "tested": "",
      "requiresPhp": "7.0",
      "wordpressState": "below",
      "phpState": "meets",
      "testedState": "not_checked",
      "updateSafe": false,
      "evidence": "public_metadata"
    }
  ],
  "conflicts": [
    {
      "siteId": "S-1",
      "left": "cache-a",
      "right": "cache-b",
      "code": "caller_rule",
      "confirmed": false,
      "detail": "caller says these caches conflict"
    }
  ],
  "priorities": [
    {
      "siteId": "S-1",
      "name": "Client One",
      "url": "https://client.example",
      "outdatedCount": 2,
      "knownVulnerabilityCount": 1,
      "compatibilityIssueCount": 2,
      "conflictCount": 1,
      "level": "high",
      "updateSafe": false,
      "vulnerabilityConfirmed": false
    }
  ],
  "signals": [
    {
      "code": "version_age",
      "kind": "warning",
      "confirmed": false,
      "count": 2,
      "detail": "Installed software is behind a supplied or WordPress.org public version. This is a version-age warning, not a confirmed vulnerability."
    },
    {
      "code": "caller_vulnerability",
      "kind": "indicator",
      "confirmed": false,
      "count": 1,
      "detail": "Caller-supplied vulnerability records match installed versions below the stated fixed version. The match is not independently verified."
    }
  ],
  "requestsSent": 0,
  "siteAccessed": false,
  "updateInstalled": false,
  "updateSafe": false,
  "websiteModified": false,
  "vulnerabilityInvented": false,
  "findings": [
    {
      "kind": "unavailable",
      "code": "catalog_missing",
      "subject": "cache-a",
      "detail": "No public release row was available for this slug, so compatibility was not checked."
    },
    {
      "kind": "unavailable",
      "code": "catalog_missing",
      "subject": "cache-b",
      "detail": "No public release row was available for this slug, so compatibility was not checked."
    }
  ],
  "limitations": [
    "Site inventories, plugins, and themes are copied only from labeled fields supplied by the caller.",
    "Public release data comes from the caller or from one public WordPress.org metadata response per slug.",
    "An older version is a version-age warning. A vulnerability is listed only when the caller supplied it.",
    "An update is never marked safe. Matching a tested WordPress version is not proof that an update will work.",
    "No WordPress installation is logged into, updated, or modified."
  ]
}

curl -i -X POST "https://brainiac.software/api/v1/wordpress-fleet/agency-report" \
  -H 'content-type: application/json' \
  -H 'Idempotency-Key: <fresh-64-character-random-hex-key>' \
  --data-binary @- <<'JSON'
{
  "sites": [
    {
      "id": "S-1",
      "url": "https://client.example",
      "name": "Client One",
      "wordpress": "6.0",
      "php": "7.0"
    }
  ],
  "plugins": [
    {
      "siteId": "S-1",
      "slug": "akismet",
      "name": "Akismet",
      "version": "5.0.0",
      "active": true
    },
    {
      "siteId": "S-1",
      "slug": "cache-a",
      "version": "1.0",
      "active": true
    },
    {
      "siteId": "S-1",
      "slug": "cache-b",
      "version": "1.0",
      "active": true
    }
  ],
  "themes": [
    {
      "siteId": "S-1",
      "slug": "twentytwentyfour",
      "name": "Twenty Twenty-Four",
      "version": "1.0",
      "active": true
    }
  ],
  "publicCatalog": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "version": "5.7.2",
      "requires": "5.8",
      "tested": "6.7",
      "requiresPhp": "7.2"
    },
    {
      "kind": "theme",
      "slug": "twentytwentyfour",
      "version": "1.3",
      "requires": "6.4",
      "requiresPhp": "7.0"
    }
  ],
  "vulnerabilities": [
    {
      "kind": "plugin",
      "slug": "akismet",
      "fixedIn": "5.1.0",
      "cve": "CVE-EXAMPLE-1"
    }
  ],
  "conflicts": [
    {
      "left": "cache-a",
      "right": "cache-b",
      "detail": "caller says these caches conflict"
    }
  ]
}
JSON