API Reference

Dependra REST API

Integrate compliance scanning, EU alternative discovery, and risk assessment into your applications.

Base URLhttps://api.dependra.eu

Get API Key

Generate an API key from your dashboard settings.

Go to Settings

Make Your First Call

Test the API with a simple request to list alternatives.

View Example

Run a Scan

Trigger a compliance scan on your project assets.

View Example

Authentication

Secure your API requests

The Dependra API uses Bearer token authentication. Include your API key in theAuthorization header of every request.

Example Request
curl -X GET "https://api.dependra.eu/api/v1/auth/user" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json"
Best Practices
  • • Store API keys securely (environment variables)
  • • Never expose keys in client-side code
  • • Rotate keys periodically
  • • Use separate keys for dev/prod
Security Notes
  • • All requests must use HTTPS
  • • Tokens expire after 24 hours
  • • Failed auth returns 401 error
  • • Rate limits apply per API key

API Endpoints

Complete reference for all available endpoints

Rate Limits

API usage limits by subscription plan

PlanRequestsScansProjects
Free100/hour5/month1
Professional1,000/hour50/month10
Enterprise10,000/hourUnlimitedUnlimited

Rate limit headers are included in every response:X-RateLimit-Limit,X-RateLimit-Remaining,X-RateLimit-Reset

Error Codes

HTTP status codes and error responses

CodeNameDescription
400Bad RequestInvalid request body or parameters
401UnauthorizedMissing or invalid authentication token
403ForbiddenAccess denied to this resource
404Not FoundResource does not exist
429Too Many RequestsRate limit exceeded
500Internal Server ErrorServer error, please try again

Error Response Format

{
  "error": "Error message here",
  "code": "ERROR_CODE",
  "details": { ... }
}

SDKs & Tools

Official client libraries and integrations

🟨

JavaScript/Node.js

npm install @dependra/sdk

Full-featured SDK for Node.js and browser environments.

Coming Soon
🐍

Python

pip install dependra

Python SDK with async support and type hints.

Coming Soon

CLI Tool

npx dependra-cli

Command-line tool for CI/CD integration.

Coming Soon

CI/CD Integration Examples

GitHub Actions
name: Compliance Check
on: [push, pull_request]
jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Run Dependra Scan
        env:
          DEPENDRA_API_KEY: ${{ secrets.DEPENDRA_API_KEY }}
        run: |
          curl -X POST "https://api.dependra.eu/api/v1/scan/$PROJECT_ID" \
            -H "Authorization: Bearer $DEPENDRA_API_KEY"
🦊GitLab CI
compliance_scan:
  stage: test
  script:
    - |
      curl -X POST "https://api.dependra.eu/api/v1/scan/$PROJECT_ID" \
        -H "Authorization: Bearer $DEPENDRA_API_KEY" \
        -H "Content-Type: application/json"
  only:
    - main
    - merge_requests

Need Help?

Have questions about the API? Our team is here to help you integrate Dependra into your workflow.

Docs
Full documentation
Community
Join discussions