Asset Lookup

Look up AI assets by fingerprint, name, version, or ecosystem using the /v1/assets/lookup endpoint, with live response examples for all nine lookup methods.

How Lookup Works

GET /v1/assets/lookup accepts two kinds of lookup items:

Exact fingerprints
Name-based lookup keys

Name-based lookup keys can include lookup_name, lookup_version, lookup_ecosystem, and lookup_fingerprint.

If a fingerprint matches exactly, the response returns match_confidence.score = 100 with fingerprint_exact.
If you supply a name only, AIRiskDB picks the best candidate and returns candidate_count.
Adding include_candidates=true also returns a ranked candidates array.
If lookup_fingerprint is present and matches an asset, it wins immediately, even if the name does not match.

Query Parameters

Exact Fingerprint Parameters

Parameter	Type	Notes
`fingerprints`	string[]	Repeatable exact fingerprint lookup parameter
`fingerprint`	string[]	Alternate exact fingerprint lookup parameter; values may also be comma-separated

Name-Based Lookup Parameters

Parameter	Type	Notes
`lookup_name`	string[]	Required for all name-based lookups
`lookup_version`	string[]	Optional; aligned by index with `lookup_name`
`lookup_ecosystem`	string[]	Optional; aligned by index with `lookup_name`
`lookup_fingerprint`	string[]	Optional fallback fingerprint; aligned by index with `lookup_name`
`include_candidates`	boolean	Optional; defaults to `false`
`expand[]`	string[]	Optional; supported values are `findings` and `aibom`

Response Statuses

Each lookup result returns one of these statuses:

Status	Meaning
`enriched`	Full asset is available
`pending`	Asset exists but enrichment is not complete
`unknown`	No asset matched

Match Confidence

AIRiskDB uses these confidence sources:

Source	Meaning
`fingerprint_exact`	Exact fingerprint match
`name_exact`	Exact name match
`name_prefix_match`	Candidate name starts with the supplied lookup name
`name_keyword_match`	Fuzzy keyword match
`name_version_exact`	Exact name plus exact version match
`ecosystem_exact`	Ecosystem matched exactly and raised confidence

Method 1: Exact Lookup by `fingerprints`

Use fingerprints when you already know the canonical asset fingerprint.

curl -sS "https://api.airiskdb.com/v1/assets/lookup?fingerprints=sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327" \
  -H "Authorization: Bearer $RISKDB_API_KEY"

Response:

{
  "object": "asset_lookup",
  "results": [
    {
      "aibom": null,
      "asset": {
        "id": "aset_ed96896b57724069849e",
        "object": "asset",
        "created": 1775634081,
        "updated": 1775634081,
        "livemode": false,
        "metadata": {
          "benchmark_match_strategy": "exact",
          "benchmark_matched": "true",
          "benchmark_sources": "leaderboard.json,leaderboard_detail.json,message.txt",
          "context_length": "131072",
          "input_modalities": "text,image",
          "max_completion_tokens": "8192",
          "modality": "text+image->text",
          "model_id": "google/gemma-3-4b-it",
          "model_slug": "google/gemma-3-4b-it",
          "output_modalities": "text",
          "registry": "openrouter",
          "tokenizer": "Gemini"
        },
        "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
        "asset_type": "api_endpoint",
        "name": "Google: Gemma 3 4B",
        "source_url": "https://openrouter.ai/google/gemma-3-4b-it",
        "enrichment_status": "enriched",
        "enriched_at": 1775634081,
        "enrichment_ttl": 1775720481,
        "intrinsic_risk_score": 48,
        "intrinsic_risk_severity": "medium",
        "publisher_trust": "unknown_with_source",
        "first_seen": 1775634073,
        "last_seen": 1775634073,
        "observation_count": 2,
        "benchmark_summary": {
          "matched": true,
          "match_strategy": "exact",
          "matched_key": "gemma-3-4b-it",
          "sources": [
            "leaderboard.json",
            "leaderboard_detail.json",
            "message.txt"
          ],
          "leaderboard_rank": 176,
          "leaderboard_risk_score": 39.109,
          "leaderboard_safety_score": 25.5309,
          "enkrypt_rating": 1.9,
          "validation_score": 40.9770687936,
          "multi_turn_resistance": 6.9620253165,
          "combined_score": 23.969547055
        },
        "findings": "find_6015e4fc064d42a1b6a9",
        "aibom": "abom_88ffe0eacd304dc88483"
      },
      "candidate_count": 1,
      "findings": null,
      "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
      "match_confidence": {
        "score": 100,
        "sources": [
          "fingerprint_exact"
        ]
      },
      "status": "enriched"
    }
  ]
}

Method 2: Exact Lookup by Singular `fingerprint` with Comma-Separated Values

The singular fingerprint parameter is also accepted and supports comma-separated values. Useful when a client has multiple exact fingerprints and wants a single request.

curl -sS "https://api.airiskdb.com/v1/assets/lookup?fingerprint=sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327,sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff" \
  -H "Authorization: Bearer $RISKDB_API_KEY"

Response:

{
  "object": "asset_lookup",
  "results": [
    {
      "aibom": null,
      "asset": {
        "id": "aset_ed96896b57724069849e",
        "object": "asset",
        "created": 1775634081,
        "updated": 1775634081,
        "livemode": false,
        "metadata": {
          "benchmark_match_strategy": "exact",
          "benchmark_matched": "true",
          "benchmark_sources": "leaderboard.json,leaderboard_detail.json,message.txt",
          "context_length": "131072",
          "input_modalities": "text,image",
          "max_completion_tokens": "8192",
          "modality": "text+image->text",
          "model_id": "google/gemma-3-4b-it",
          "model_slug": "google/gemma-3-4b-it",
          "output_modalities": "text",
          "registry": "openrouter",
          "tokenizer": "Gemini"
        },
        "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
        "asset_type": "api_endpoint",
        "name": "Google: Gemma 3 4B",
        "source_url": "https://openrouter.ai/google/gemma-3-4b-it",
        "enrichment_status": "enriched",
        "enriched_at": 1775634081,
        "enrichment_ttl": 1775720481,
        "intrinsic_risk_score": 48,
        "intrinsic_risk_severity": "medium",
        "publisher_trust": "unknown_with_source",
        "first_seen": 1775634073,
        "last_seen": 1775634073,
        "observation_count": 2,
        "benchmark_summary": {
          "matched": true,
          "match_strategy": "exact",
          "matched_key": "gemma-3-4b-it",
          "sources": [
            "leaderboard.json",
            "leaderboard_detail.json",
            "message.txt"
          ],
          "leaderboard_rank": 176,
          "leaderboard_risk_score": 39.109,
          "leaderboard_safety_score": 25.5309,
          "enkrypt_rating": 1.9,
          "validation_score": 40.9770687936,
          "multi_turn_resistance": 6.9620253165,
          "combined_score": 23.969547055
        },
        "findings": "find_6015e4fc064d42a1b6a9",
        "aibom": "abom_88ffe0eacd304dc88483"
      },
      "candidate_count": 1,
      "findings": null,
      "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
      "match_confidence": {
        "score": 100,
        "sources": [
          "fingerprint_exact"
        ]
      },
      "status": "enriched"
    },
    {
      "aibom": null,
      "asset": null,
      "findings": null,
      "fingerprint": "sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
      "status": "unknown"
    }
  ]
}

Method 3: Exact Name Lookup, Best Candidate Only

When you send only lookup_name, AIRiskDB resolves a single best candidate. The candidates array is not included unless you request it. This is the simplest name-based lookup form.

curl -sS --get "https://api.airiskdb.com/v1/assets/lookup" \
  --data-urlencode "lookup_name=Google: Gemma 3 4B" \
  -H "Authorization: Bearer $RISKDB_API_KEY"

Response:

{
  "object": "asset_lookup",
  "results": [
    {
      "aibom": null,
      "asset": {
        "id": "aset_ed96896b57724069849e",
        "object": "asset",
        "created": 1775634081,
        "updated": 1775634081,
        "livemode": false,
        "metadata": {
          "benchmark_match_strategy": "exact",
          "benchmark_matched": "true",
          "benchmark_sources": "leaderboard.json,leaderboard_detail.json,message.txt",
          "context_length": "131072",
          "input_modalities": "text,image",
          "max_completion_tokens": "8192",
          "modality": "text+image->text",
          "model_id": "google/gemma-3-4b-it",
          "model_slug": "google/gemma-3-4b-it",
          "output_modalities": "text",
          "registry": "openrouter",
          "tokenizer": "Gemini"
        },
        "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
        "asset_type": "api_endpoint",
        "name": "Google: Gemma 3 4B",
        "source_url": "https://openrouter.ai/google/gemma-3-4b-it",
        "enrichment_status": "enriched",
        "enriched_at": 1775634081,
        "enrichment_ttl": 1775720481,
        "intrinsic_risk_score": 48,
        "intrinsic_risk_severity": "medium",
        "publisher_trust": "unknown_with_source",
        "first_seen": 1775634073,
        "last_seen": 1775634073,
        "observation_count": 2,
        "benchmark_summary": {
          "matched": true,
          "match_strategy": "exact",
          "matched_key": "gemma-3-4b-it",
          "sources": [
            "leaderboard.json",
            "leaderboard_detail.json",
            "message.txt"
          ],
          "leaderboard_rank": 176,
          "leaderboard_risk_score": 39.109,
          "leaderboard_safety_score": 25.5309,
          "enkrypt_rating": 1.9,
          "validation_score": 40.9770687936,
          "multi_turn_resistance": 6.9620253165,
          "combined_score": 23.969547055
        },
        "findings": "find_6015e4fc064d42a1b6a9",
        "aibom": "abom_88ffe0eacd304dc88483"
      },
      "candidate_count": 1,
      "findings": null,
      "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
      "lookup_key": {
        "name": "Google: Gemma 3 4B",
        "version": ""
      },
      "match_confidence": {
        "score": 90,
        "sources": [
          "name_exact"
        ]
      },
      "status": "enriched"
    }
  ]
}

Method 4: Fuzzy Name Search, Best Candidate Only

A short keyword such as gemma performs fuzzy name lookup. Without include_candidates=true, you still get a best match and the total candidate_count. Use this for "give me the most likely match" behavior.

curl -sS --get "https://api.airiskdb.com/v1/assets/lookup" \
  --data-urlencode "lookup_name=gemma" \
  -H "Authorization: Bearer $RISKDB_API_KEY"

Response:

{
  "object": "asset_lookup",
  "results": [
    {
      "aibom": null,
      "asset": {
        "id": "aset_ed96896b57724069849e",
        "object": "asset",
        "created": 1775634081,
        "updated": 1775634081,
        "livemode": false,
        "metadata": {
          "benchmark_match_strategy": "exact",
          "benchmark_matched": "true",
          "benchmark_sources": "leaderboard.json,leaderboard_detail.json,message.txt",
          "context_length": "131072",
          "input_modalities": "text,image",
          "max_completion_tokens": "8192",
          "modality": "text+image->text",
          "model_id": "google/gemma-3-4b-it",
          "model_slug": "google/gemma-3-4b-it",
          "output_modalities": "text",
          "registry": "openrouter",
          "tokenizer": "Gemini"
        },
        "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
        "asset_type": "api_endpoint",
        "name": "Google: Gemma 3 4B",
        "source_url": "https://openrouter.ai/google/gemma-3-4b-it",
        "enrichment_status": "enriched",
        "enriched_at": 1775634081,
        "enrichment_ttl": 1775720481,
        "intrinsic_risk_score": 48,
        "intrinsic_risk_severity": "medium",
        "publisher_trust": "unknown_with_source",
        "first_seen": 1775634073,
        "last_seen": 1775634073,
        "observation_count": 2,
        "benchmark_summary": {
          "matched": true,
          "match_strategy": "exact",
          "matched_key": "gemma-3-4b-it",
          "sources": [
            "leaderboard.json",
            "leaderboard_detail.json",
            "message.txt"
          ],
          "leaderboard_rank": 176,
          "leaderboard_risk_score": 39.109,
          "leaderboard_safety_score": 25.5309,
          "enkrypt_rating": 1.9,
          "validation_score": 40.9770687936,
          "multi_turn_resistance": 6.9620253165,
          "combined_score": 23.969547055
        },
        "findings": "find_6015e4fc064d42a1b6a9",
        "aibom": "abom_88ffe0eacd304dc88483"
      },
      "candidate_count": 9,
      "findings": null,
      "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
      "lookup_key": {
        "name": "gemma",
        "version": ""
      },
      "match_confidence": {
        "score": 70,
        "sources": [
          "name_keyword_match"
        ]
      },
      "status": "enriched"
    }
  ]
}

Method 5: Fuzzy Name Search with `include_candidates=true`

Use this when you want the best match plus ranked alternatives. Best for search UIs, operator tooling, or onboarding flows where users may want to choose from multiple close matches.

curl -sS --get "https://api.airiskdb.com/v1/assets/lookup" \
  --data-urlencode "lookup_name=gemma" \
  --data-urlencode "include_candidates=true" \
  -H "Authorization: Bearer $RISKDB_API_KEY"

Response:

{
  "object": "asset_lookup",
  "results": [
    {
      "aibom": null,
      "asset": {
        "id": "aset_ed96896b57724069849e",
        "object": "asset",
        "created": 1775634081,
        "updated": 1775634081,
        "livemode": false,
        "metadata": {
          "benchmark_match_strategy": "exact",
          "benchmark_matched": "true",
          "benchmark_sources": "leaderboard.json,leaderboard_detail.json,message.txt",
          "context_length": "131072",
          "input_modalities": "text,image",
          "max_completion_tokens": "8192",
          "modality": "text+image->text",
          "model_id": "google/gemma-3-4b-it",
          "model_slug": "google/gemma-3-4b-it",
          "output_modalities": "text",
          "registry": "openrouter",
          "tokenizer": "Gemini"
        },
        "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
        "asset_type": "api_endpoint",
        "name": "Google: Gemma 3 4B",
        "source_url": "https://openrouter.ai/google/gemma-3-4b-it",
        "enrichment_status": "enriched",
        "enriched_at": 1775634081,
        "enrichment_ttl": 1775720481,
        "intrinsic_risk_score": 48,
        "intrinsic_risk_severity": "medium",
        "publisher_trust": "unknown_with_source",
        "first_seen": 1775634073,
        "last_seen": 1775634073,
        "observation_count": 2,
        "benchmark_summary": {
          "matched": true,
          "match_strategy": "exact",
          "matched_key": "gemma-3-4b-it",
          "sources": [
            "leaderboard.json",
            "leaderboard_detail.json",
            "message.txt"
          ],
          "leaderboard_rank": 176,
          "leaderboard_risk_score": 39.109,
          "leaderboard_safety_score": 25.5309,
          "enkrypt_rating": 1.9,
          "validation_score": 40.9770687936,
          "multi_turn_resistance": 6.9620253165,
          "combined_score": 23.969547055
        },
        "findings": "find_6015e4fc064d42a1b6a9",
        "aibom": "abom_88ffe0eacd304dc88483"
      },
      "candidate_count": 9,
      "candidates": [
        {
          "asset": {
            "id": "aset_ed96896b57724069849e",
            "object": "asset",
            "created": 1775634081,
            "updated": 1775634081,
            "livemode": false,
            "metadata": {
              "benchmark_match_strategy": "exact",
              "benchmark_matched": "true",
              "benchmark_sources": "leaderboard.json,leaderboard_detail.json,message.txt",
              "context_length": "131072",
              "input_modalities": "text,image",
              "max_completion_tokens": "8192",
              "modality": "text+image->text",
              "model_id": "google/gemma-3-4b-it",
              "model_slug": "google/gemma-3-4b-it",
              "output_modalities": "text",
              "registry": "openrouter",
              "tokenizer": "Gemini"
            },
            "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
            "asset_type": "api_endpoint",
            "name": "Google: Gemma 3 4B",
            "source_url": "https://openrouter.ai/google/gemma-3-4b-it",
            "enrichment_status": "enriched",
            "enriched_at": 1775634081,
            "enrichment_ttl": 1775720481,
            "intrinsic_risk_score": 48,
            "intrinsic_risk_severity": "medium",
            "publisher_trust": "unknown_with_source",
            "first_seen": 1775634073,
            "last_seen": 1775634073,
            "observation_count": 2,
            "benchmark_summary": {
              "matched": true,
              "match_strategy": "exact",
              "matched_key": "gemma-3-4b-it",
              "sources": [
                "leaderboard.json",
                "leaderboard_detail.json",
                "message.txt"
              ],
              "leaderboard_rank": 176,
              "leaderboard_risk_score": 39.109,
              "leaderboard_safety_score": 25.5309,
              "enkrypt_rating": 1.9,
              "validation_score": 40.9770687936,
              "multi_turn_resistance": 6.9620253165,
              "combined_score": 23.969547055
            },
            "findings": "find_6015e4fc064d42a1b6a9",
            "aibom": "abom_88ffe0eacd304dc88483"
          },
          "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
          "match_confidence": {
            "score": 70,
            "sources": [
              "name_keyword_match"
            ]
          },
          "status": "enriched"
        },
        {
          "asset": {
            "id": "aset_e0172d3755ac4e08abd9",
            "object": "asset",
            "created": 1775634081,
            "updated": 1775634081,
            "livemode": false,
            "metadata": {
              "benchmark_match_strategy": "exact",
              "benchmark_matched": "true",
              "benchmark_sources": "leaderboard.json,leaderboard_detail.json",
              "context_length": "8192",
              "input_modalities": "text",
              "max_completion_tokens": "2048",
              "modality": "text->text",
              "model_id": "google/gemma-2-27b-it",
              "model_slug": "google/gemma-2-27b-it",
              "output_modalities": "text",
              "registry": "openrouter",
              "tokenizer": "Gemini"
            },
            "fingerprint": "sha256:509211bebbeff30412e8414ad980075723276582a46b2f307f294a8a113e290b",
            "asset_type": "api_endpoint",
            "name": "Google: Gemma 2 27B",
            "source_url": "https://openrouter.ai/google/gemma-2-27b-it",
            "enrichment_status": "enriched",
            "enriched_at": 1775634081,
            "enrichment_ttl": 1775720481,
            "intrinsic_risk_score": 32,
            "intrinsic_risk_severity": "low",
            "publisher_trust": "unknown_with_source",
            "first_seen": 1775634073,
            "last_seen": 1775634073,
            "observation_count": 1,
            "benchmark_summary": {
              "matched": true,
              "match_strategy": "exact",
              "matched_key": "gemma-2-27b-it",
              "sources": [
                "leaderboard.json",
                "leaderboard_detail.json"
              ],
              "leaderboard_rank": 35,
              "leaderboard_risk_score": 21.6434,
              "leaderboard_safety_score": 24.1611,
              "enkrypt_rating": 3.2
            },
            "findings": "find_2eef81efc7dd4a0293ef",
            "aibom": "abom_f44280774a7649819aec"
          },
          "fingerprint": "sha256:509211bebbeff30412e8414ad980075723276582a46b2f307f294a8a113e290b",
          "match_confidence": {
            "score": 70,
            "sources": [
              "name_keyword_match"
            ]
          },
          "status": "enriched"
        },
        {
          "asset": {
            "id": "aset_db2678a63fd0468b8174",
            "object": "asset",
            "created": 1775634081,
            "updated": 1775634081,
            "livemode": false,
            "metadata": {
              "benchmark_match_strategy": "exact",
              "benchmark_matched": "true",
              "benchmark_sources": "leaderboard.json,leaderboard_detail.json,message.txt",
              "context_length": "131072",
              "input_modalities": "text,image",
              "max_completion_tokens": "16384",
              "modality": "text+image->text",
              "model_id": "google/gemma-3-27b-it",
              "model_slug": "google/gemma-3-27b-it",
              "output_modalities": "text",
              "registry": "openrouter",
              "tokenizer": "Gemini"
            },
            "fingerprint": "sha256:80012a45d52b8061ceae2e2345da5e12c23ec4a04267705a457d0981c3ec2bcf",
            "asset_type": "api_endpoint",
            "name": "Google: Gemma 3 27B",
            "source_url": "https://openrouter.ai/google/gemma-3-27b-it",
            "enrichment_status": "enriched",
            "enriched_at": 1775634081,
            "enrichment_ttl": 1775720481,
            "intrinsic_risk_score": 48,
            "intrinsic_risk_severity": "medium",
            "publisher_trust": "unknown_with_source",
            "first_seen": 1775634073,
            "last_seen": 1775634073,
            "observation_count": 2,
            "benchmark_summary": {
              "matched": true,
              "match_strategy": "exact",
              "matched_key": "gemma-3-27b-it",
              "sources": [
                "leaderboard.json",
                "leaderboard_detail.json",
                "message.txt"
              ],
              "leaderboard_rank": 142,
              "leaderboard_risk_score": 35.0275,
              "leaderboard_safety_score": 23.6486,
              "enkrypt_rating": 2.2,
              "validation_score": 30.5583250249,
              "multi_turn_resistance": 6.5677966102,
              "combined_score": 18.5630608175
            },
            "findings": "find_c31ad020376a4dfb9778",
            "aibom": "abom_316104dfa93d469faa8e"
          },
          "fingerprint": "sha256:80012a45d52b8061ceae2e2345da5e12c23ec4a04267705a457d0981c3ec2bcf",
          "match_confidence": {
            "score": 70,
            "sources": [
              "name_keyword_match"
            ]
          },
          "status": "enriched"
        },
        {
          "asset": {
            "id": "aset_5de9c0a9e8cb4667a82e",
            "object": "asset",
            "created": 1775634081,
            "updated": 1775634081,
            "livemode": false,
            "metadata": {
              "benchmark_match_strategy": "exact",
              "benchmark_matched": "true",
              "benchmark_sources": "leaderboard.json,leaderboard_detail.json,message.txt",
              "context_length": "131072",
              "input_modalities": "text,image",
              "max_completion_tokens": "8192",
              "modality": "text+image->text",
              "model_id": "google/gemma-3-12b-it",
              "model_slug": "google/gemma-3-12b-it",
              "output_modalities": "text",
              "registry": "openrouter",
              "tokenizer": "Gemini"
            },
            "fingerprint": "sha256:0d6011a907f99335ae80acaa26240e30f79f16340975887d89b9135170705cdd",
            "asset_type": "api_endpoint",
            "name": "Google: Gemma 3 12B",
            "source_url": "https://openrouter.ai/google/gemma-3-12b-it",
            "enrichment_status": "enriched",
            "enriched_at": 1775634081,
            "enrichment_ttl": 1775720481,
            "intrinsic_risk_score": 40,
            "intrinsic_risk_severity": "medium",
            "publisher_trust": "unknown_with_source",
            "first_seen": 1775634073,
            "last_seen": 1775634073,
            "observation_count": 2,
            "benchmark_summary": {
              "matched": true,
              "match_strategy": "exact",
              "matched_key": "gemma-3-12b-it",
              "sources": [
                "leaderboard.json",
                "leaderboard_detail.json",
                "message.txt"
              ],
              "leaderboard_rank": 141,
              "leaderboard_risk_score": 35.3775,
              "leaderboard_safety_score": 22.6834,
              "enkrypt_rating": 2.2,
              "validation_score": 34.4466600199,
              "multi_turn_resistance": 21.4893617021,
              "combined_score": 27.968010861
            },
            "findings": "find_1a635823ddbf441b9fbd",
            "aibom": "abom_9f4c0074fdd2452da102"
          },
          "fingerprint": "sha256:0d6011a907f99335ae80acaa26240e30f79f16340975887d89b9135170705cdd",
          "match_confidence": {
            "score": 70,
            "sources": [
              "name_keyword_match"
            ]
          },
          "status": "enriched"
        },
        {
          "asset": {
            "id": "aset_3175d36190134818acbd",
            "object": "asset",
            "created": 1775634081,
            "updated": 1775634081,
            "livemode": false,
            "metadata": {
              "benchmark_match_strategy": "exact",
              "benchmark_matched": "true",
              "benchmark_sources": "leaderboard.json,leaderboard_detail.json",
              "context_length": "8192",
              "input_modalities": "text",
              "modality": "text->text",
              "model_id": "google/gemma-2-9b-it",
              "model_slug": "google/gemma-2-9b-it",
              "output_modalities": "text",
              "registry": "openrouter",
              "tokenizer": "Gemini"
            },
            "fingerprint": "sha256:20f54579088ab60b9a5d310235019bbf6bab787062afa2331703c74ad669527e",
            "asset_type": "api_endpoint",
            "name": "Google: Gemma 2 9B",
            "source_url": "https://openrouter.ai/google/gemma-2-9b-it",
            "enrichment_status": "enriched",
            "enriched_at": 1775634081,
            "enrichment_ttl": 1775720481,
            "intrinsic_risk_score": 24,
            "intrinsic_risk_severity": "low",
            "publisher_trust": "unknown_with_source",
            "first_seen": 1775634073,
            "last_seen": 1775634073,
            "observation_count": 1,
            "benchmark_summary": {
              "matched": true,
              "match_strategy": "exact",
              "matched_key": "gemma-2-9b-it",
              "sources": [
                "leaderboard.json",
                "leaderboard_detail.json"
              ],
              "leaderboard_rank": 190,
              "leaderboard_risk_score": 40.9625,
              "leaderboard_safety_score": 50.0965,
              "enkrypt_rating": 1.7
            },
            "findings": "find_f27d777c54794576a09a",
            "aibom": "abom_5e8589c88c5f495ebf9c"
          },
          "fingerprint": "sha256:20f54579088ab60b9a5d310235019bbf6bab787062afa2331703c74ad669527e",
          "match_confidence": {
            "score": 70,
            "sources": [
              "name_keyword_match"
            ]
          },
          "status": "enriched"
        },
        {
          "asset": {
            "id": "aset_94b46184396d4d34a4fd",
            "object": "asset",
            "created": 1775634080,
            "updated": 1775634080,
            "livemode": false,
            "metadata": {
              "benchmark_matched": "false",
              "benchmark_sources": "",
              "context_length": "32768",
              "input_modalities": "text",
              "max_completion_tokens": "2048",
              "modality": "text->text",
              "model_id": "google/gemma-3n-e4b-it",
              "model_slug": "google/gemma-3n-e4b-it",
              "output_modalities": "text",
              "registry": "openrouter",
              "tokenizer": "Other"
            },
            "fingerprint": "sha256:efc2fa8bb86d873a56682c13e9fe9ae40e71c7ef2ee728b31ab3c654886d52c1",
            "asset_type": "api_endpoint",
            "name": "Google: Gemma 3n 4B",
            "source_url": "https://openrouter.ai/google/gemma-3n-e4b-it",
            "enrichment_status": "enriched",
            "enriched_at": 1775634080,
            "enrichment_ttl": 1775720480,
            "intrinsic_risk_score": 32,
            "intrinsic_risk_severity": "low",
            "publisher_trust": "unknown_with_source",
            "first_seen": 1775634073,
            "last_seen": 1775634073,
            "observation_count": 2,
            "benchmark_summary": {
              "matched": false
            },
            "findings": "find_bed6a17652e649d7a9a8",
            "aibom": "abom_7a8a5d28a18645e386ce"
          },
          "fingerprint": "sha256:efc2fa8bb86d873a56682c13e9fe9ae40e71c7ef2ee728b31ab3c654886d52c1",
          "match_confidence": {
            "score": 70,
            "sources": [
              "name_keyword_match"
            ]
          },
          "status": "enriched"
        },
        {
          "asset": {
            "id": "aset_389a9895a9884e0192df",
            "object": "asset",
            "created": 1775634080,
            "updated": 1775634080,
            "livemode": false,
            "metadata": {
              "benchmark_matched": "false",
              "benchmark_sources": "",
              "context_length": "8192",
              "input_modalities": "text",
              "max_completion_tokens": "2048",
              "modality": "text->text",
              "model_id": "google/gemma-3n-e2b-it:free",
              "model_slug": "google/gemma-3n-e2b-it",
              "output_modalities": "text",
              "registry": "openrouter",
              "tokenizer": "Other"
            },
            "fingerprint": "sha256:595451017a135e00b531dfbdf62869aff5d8018c7d939fb7079819da2e204312",
            "asset_type": "api_endpoint",
            "name": "Google: Gemma 3n 2B (free)",
            "source_url": "https://openrouter.ai/google/gemma-3n-e2b-it",
            "enrichment_status": "enriched",
            "enriched_at": 1775634080,
            "enrichment_ttl": 1775720480,
            "intrinsic_risk_score": 32,
            "intrinsic_risk_severity": "low",
            "publisher_trust": "unknown_with_source",
            "first_seen": 1775634073,
            "last_seen": 1775634073,
            "observation_count": 1,
            "benchmark_summary": {
              "matched": false
            },
            "findings": "find_43df919a331a4af588f1",
            "aibom": "abom_3bbfbc82af79445c9536"
          },
          "fingerprint": "sha256:595451017a135e00b531dfbdf62869aff5d8018c7d939fb7079819da2e204312",
          "match_confidence": {
            "score": 70,
            "sources": [
              "name_keyword_match"
            ]
          },
          "status": "enriched"
        },
        {
          "asset": {
            "id": "aset_88e5f7414aa54b77a331",
            "object": "asset",
            "created": 1775634078,
            "updated": 1775634078,
            "livemode": false,
            "metadata": {
              "benchmark_matched": "false",
              "benchmark_sources": "",
              "context_length": "262144",
              "input_modalities": "image,text,video",
              "max_completion_tokens": "131072",
              "modality": "text+image+video->text",
              "model_id": "google/gemma-4-31b-it",
              "model_slug": "google/gemma-4-31b-it-20260402",
              "output_modalities": "text",
              "registry": "openrouter",
              "tokenizer": "Gemma"
            },
            "fingerprint": "sha256:28d5c23700ccc42e7b1ebe891cf66ec18dd2f5bce89073fd7ac0b02b3a370fb0",
            "asset_type": "api_endpoint",
            "name": "Google: Gemma 4 31B",
            "source_url": "https://openrouter.ai/google/gemma-4-31b-it-20260402",
            "enrichment_status": "enriched",
            "enriched_at": 1775634078,
            "enrichment_ttl": 1775720478,
            "intrinsic_risk_score": 60,
            "intrinsic_risk_severity": "high",
            "publisher_trust": "unknown_with_source",
            "first_seen": 1775634073,
            "last_seen": 1775634073,
            "observation_count": 2,
            "benchmark_summary": {
              "matched": false
            },
            "findings": "find_43ad40e06e914ee5a8c1",
            "aibom": "abom_843a99a4b5b24221b7f4"
          },
          "fingerprint": "sha256:28d5c23700ccc42e7b1ebe891cf66ec18dd2f5bce89073fd7ac0b02b3a370fb0",
          "match_confidence": {
            "score": 70,
            "sources": [
              "name_keyword_match"
            ]
          },
          "status": "enriched"
        },
        {
          "asset": {
            "id": "aset_680cb553c1a645caa3f2",
            "object": "asset",
            "created": 1775634078,
            "updated": 1775634078,
            "livemode": false,
            "metadata": {
              "benchmark_matched": "false",
              "benchmark_sources": "",
              "context_length": "262144",
              "input_modalities": "image,text,video",
              "max_completion_tokens": "262144",
              "modality": "text+image+video->text",
              "model_id": "google/gemma-4-26b-a4b-it",
              "model_slug": "google/gemma-4-26b-a4b-it-20260403",
              "output_modalities": "text",
              "registry": "openrouter",
              "tokenizer": "Gemma"
            },
            "fingerprint": "sha256:c721fa2d45f2fc99e0f80973af4453097c02febfee236638ece25401930cfef1",
            "asset_type": "api_endpoint",
            "name": "Google: Gemma 4 26B A4B",
            "source_url": "https://openrouter.ai/google/gemma-4-26b-a4b-it-20260403",
            "enrichment_status": "enriched",
            "enriched_at": 1775634078,
            "enrichment_ttl": 1775720478,
            "intrinsic_risk_score": 60,
            "intrinsic_risk_severity": "high",
            "publisher_trust": "unknown_with_source",
            "first_seen": 1775634073,
            "last_seen": 1775634073,
            "observation_count": 2,
            "benchmark_summary": {
              "matched": false
            },
            "findings": "find_6d75b35870f84738adb3",
            "aibom": "abom_71abd5ba90f140fdb9fa"
          },
          "fingerprint": "sha256:c721fa2d45f2fc99e0f80973af4453097c02febfee236638ece25401930cfef1",
          "match_confidence": {
            "score": 70,
            "sources": [
              "name_keyword_match"
            ]
          },
          "status": "enriched"
        }
      ],
      "findings": null,
      "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
      "lookup_key": {
        "name": "gemma",
        "version": ""
      },
      "match_confidence": {
        "score": 70,
        "sources": [
          "name_keyword_match"
        ]
      },
      "status": "enriched"
    }
  ]
}

Method 6: Name Lookup with `expand[]=findings` and `expand[]=aibom`

The lookup endpoint can inline the related findings and AI-BOM resources. Use this when you want a single call to return the asset, its enrichment findings, and its AI-BOM without follow-up requests.

curl -sS --get "https://api.airiskdb.com/v1/assets/lookup" \
  --data-urlencode "lookup_name=Google: Gemma 3 4B" \
  --data-urlencode "include_candidates=true" \
  --data-urlencode "expand[]=findings" \
  --data-urlencode "expand[]=aibom" \
  -H "Authorization: Bearer $RISKDB_API_KEY"

Response:

{
  "object": "asset_lookup",
  "results": [
    {
      "aibom": {
        "id": "abom_88ffe0eacd304dc88483",
        "object": "aibom",
        "created": 1775634081,
        "updated": 1775634081,
        "livemode": false,
        "metadata": {
          "benchmark_match_strategy": "exact",
          "benchmark_matched": "true",
          "benchmark_sources": "leaderboard.json,leaderboard_detail.json,message.txt",
          "context_length": "32768",
          "input_modalities": "text,image",
          "max_completion_tokens": "8192",
          "modality": "text+image->text",
          "model_id": "google/gemma-3-4b-it:free",
          "model_slug": "google/gemma-3-4b-it",
          "output_modalities": "text",
          "registry": "openrouter",
          "tokenizer": "Gemini"
        },
        "asset_id": "aset_ed96896b57724069849e",
        "spdx_version": "SPDX-3.0.1",
        "spdx_document": {
          "SPDXID": "SPDXRef-DOCUMENT",
          "creationInfo": {
            "created": "2026-04-08T07:41:21Z",
            "creators": [
              "Tool: SuperAlign Risk Intelligence"
            ]
          },
          "name": "superalign-ai-bom",
          "packages": [
            {
              "name": "Google: Gemma 3 4B (free)",
              "type": "model",
              "version": "google/gemma-3-4b-it"
            },
            {
              "name": "Gemini",
              "type": "runtime",
              "version": "unknown"
            }
          ],
          "spdxVersion": "SPDX-3.0.1"
        },
        "components": [
          {
            "name": "Google: Gemma 3 4B (free)",
            "version": "google/gemma-3-4b-it",
            "type": "model"
          },
          {
            "name": "Gemini",
            "version": "unknown",
            "type": "runtime"
          }
        ],
        "generated_at": 1775634081,
        "bom_version": 1
      },
      "asset": {
        "id": "aset_ed96896b57724069849e",
        "object": "asset",
        "created": 1775634081,
        "updated": 1775634081,
        "livemode": false,
        "metadata": {
          "benchmark_match_strategy": "exact",
          "benchmark_matched": "true",
          "benchmark_sources": "leaderboard.json,leaderboard_detail.json,message.txt",
          "context_length": "131072",
          "input_modalities": "text,image",
          "max_completion_tokens": "8192",
          "modality": "text+image->text",
          "model_id": "google/gemma-3-4b-it",
          "model_slug": "google/gemma-3-4b-it",
          "output_modalities": "text",
          "registry": "openrouter",
          "tokenizer": "Gemini"
        },
        "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
        "asset_type": "api_endpoint",
        "name": "Google: Gemma 3 4B",
        "source_url": "https://openrouter.ai/google/gemma-3-4b-it",
        "enrichment_status": "enriched",
        "enriched_at": 1775634081,
        "enrichment_ttl": 1775720481,
        "intrinsic_risk_score": 48,
        "intrinsic_risk_severity": "medium",
        "publisher_trust": "unknown_with_source",
        "first_seen": 1775634073,
        "last_seen": 1775634073,
        "observation_count": 2,
        "benchmark_summary": {
          "matched": true,
          "match_strategy": "exact",
          "matched_key": "gemma-3-4b-it",
          "sources": [
            "leaderboard.json",
            "leaderboard_detail.json",
            "message.txt"
          ],
          "leaderboard_rank": 176,
          "leaderboard_risk_score": 39.109,
          "leaderboard_safety_score": 25.5309,
          "enkrypt_rating": 1.9,
          "validation_score": 40.9770687936,
          "multi_turn_resistance": 6.9620253165,
          "combined_score": 23.969547055
        },
        "findings": "find_6015e4fc064d42a1b6a9",
        "aibom": "abom_88ffe0eacd304dc88483"
      },
      "candidate_count": 1,
      "candidates": [
        {
          "asset": {
            "id": "aset_ed96896b57724069849e",
            "object": "asset",
            "created": 1775634081,
            "updated": 1775634081,
            "livemode": false,
            "metadata": {
              "benchmark_match_strategy": "exact",
              "benchmark_matched": "true",
              "benchmark_sources": "leaderboard.json,leaderboard_detail.json,message.txt",
              "context_length": "131072",
              "input_modalities": "text,image",
              "max_completion_tokens": "8192",
              "modality": "text+image->text",
              "model_id": "google/gemma-3-4b-it",
              "model_slug": "google/gemma-3-4b-it",
              "output_modalities": "text",
              "registry": "openrouter",
              "tokenizer": "Gemini"
            },
            "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
            "asset_type": "api_endpoint",
            "name": "Google: Gemma 3 4B",
            "source_url": "https://openrouter.ai/google/gemma-3-4b-it",
            "enrichment_status": "enriched",
            "enriched_at": 1775634081,
            "enrichment_ttl": 1775720481,
            "intrinsic_risk_score": 48,
            "intrinsic_risk_severity": "medium",
            "publisher_trust": "unknown_with_source",
            "first_seen": 1775634073,
            "last_seen": 1775634073,
            "observation_count": 2,
            "benchmark_summary": {
              "matched": true,
              "match_strategy": "exact",
              "matched_key": "gemma-3-4b-it",
              "sources": [
                "leaderboard.json",
                "leaderboard_detail.json",
                "message.txt"
              ],
              "leaderboard_rank": 176,
              "leaderboard_risk_score": 39.109,
              "leaderboard_safety_score": 25.5309,
              "enkrypt_rating": 1.9,
              "validation_score": 40.9770687936,
              "multi_turn_resistance": 6.9620253165,
              "combined_score": 23.969547055
            },
            "findings": "find_6015e4fc064d42a1b6a9",
            "aibom": "abom_88ffe0eacd304dc88483"
          },
          "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
          "match_confidence": {
            "score": 90,
            "sources": [
              "name_exact"
            ]
          },
          "status": "enriched"
        }
      ],
      "findings": {
        "id": "find_6015e4fc064d42a1b6a9",
        "object": "finding",
        "created": 1775634081,
        "updated": 1775634081,
        "livemode": false,
        "metadata": {
          "benchmark_match_strategy": "exact",
          "benchmark_matched": "true",
          "benchmark_sources": "leaderboard.json,leaderboard_detail.json,message.txt",
          "context_length": "32768",
          "input_modalities": "text,image",
          "max_completion_tokens": "8192",
          "modality": "text+image->text",
          "model_id": "google/gemma-3-4b-it:free",
          "model_slug": "google/gemma-3-4b-it",
          "output_modalities": "text",
          "registry": "openrouter",
          "tokenizer": "Gemini"
        },
        "asset_id": "aset_ed96896b57724069849e",
        "capabilities": [
          {
            "name": "input_image",
            "declared": true,
            "risk_contribution": 8
          },
          {
            "name": "input_text",
            "declared": true,
            "risk_contribution": 8
          },
          {
            "name": "modality_text_image_to_text",
            "declared": true,
            "risk_contribution": 8
          },
          {
            "name": "output_text",
            "declared": true,
            "risk_contribution": 8
          },
          {
            "name": "reasoning",
            "declared": false,
            "risk_contribution": 8
          },
          {
            "name": "structured_outputs",
            "declared": true,
            "risk_contribution": 8
          }
        ],
        "threats": [],
        "atlas_techniques": [],
        "cve_ids": [],
        "score_breakdown": {
          "base_capability_score": 48,
          "publisher_trust_multiplier": 1,
          "threat_penalty": 0,
          "final_score": 48
        },
        "benchmark_details": {
          "matched": true,
          "match_strategy": "exact",
          "matched_key": "gemma-3-4b-it",
          "candidate_keys": [
            "google/gemma-3-4b-it:free",
            "google/gemma-3-4b-it",
            "google: gemma 3 4b (free)",
            "gemma-3-4b-it",
            "gemma-3-4b-it:free",
            "googlegemma34bitfree",
            "googlegemma34bit",
            "googlegemma34bfree"
          ],
          "sources": [
            "leaderboard.json",
            "leaderboard_detail.json",
            "message.txt"
          ],
          "leaderboard": {
            "model_name": "gemma-3-4b-it",
            "provider": "openai_compatible",
            "rank": 176,
            "risk_score": 39.109,
            "bias_score": 83.98,
            "cbrn_score": 11.5,
            "harmful_score": 51.11,
            "insecure_code_score": 44,
            "toxicity_score": 4.95,
            "jailbreak_score": 10.8553,
            "safety_score": 25.5309,
            "nist_score": 39,
            "owasp_score": 45,
            "star_score": 1.88,
            "performance_risk_ratio": "NA"
          },
          "detail": {
            "model": "gemma-3-4b-it",
            "provider": "openai_compatible",
            "rank": 176,
            "total_models": 247,
            "enkrypt_rating": 1.9,
            "nist_score": 39,
            "owasp_score": 45,
            "bias_rating": 2.6,
            "harmful_rating": 1.4,
            "toxicity_rating": 1.8,
            "cbrn_rating": 2.4,
            "insecure_code_rating": 1.8,
            "bias_pct": 21,
            "harmful_pct": 21,
            "toxicity_pct": 21,
            "cbrn_pct": 21,
            "insecure_code_pct": 21,
            "robustness_score": 2.6,
            "url": "https://leaderboard.enkryptai.com/gemma-3-4b-it"
          },
          "validation": {
            "model": "Google Gemma 3 4b It",
            "pass": 0.4097706879,
            "validation_score": 40.9770687936,
            "multi_turn_resistance": 6.9620253165,
            "multi_turn_success": 93.0379746835,
            "multi_turn_attacks": 474,
            "multi_turn_conversations": 100,
            "has_validation_data": true,
            "has_multi_turn_data": true,
            "combined_score": 23.969547055,
            "source_type": "open_source"
          }
        }
      },
      "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
      "lookup_key": {
        "name": "Google: Gemma 3 4B",
        "version": ""
      },
      "match_confidence": {
        "score": 90,
        "sources": [
          "name_exact"
        ]
      },
      "status": "enriched"
    }
  ]
}

Method 7: `lookup_fingerprint` Fallback

lookup_fingerprint is attached to a name-based lookup item. If that fallback fingerprint exists, it resolves immediately even if the name does not match. Useful when a client has a weak human-readable identifier but a stronger fallback fingerprint.

curl -sS --get "https://api.airiskdb.com/v1/assets/lookup" \
  --data-urlencode "lookup_name=no-such-asset" \
  --data-urlencode "lookup_fingerprint=sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327" \
  -H "Authorization: Bearer $RISKDB_API_KEY"

Response:

{
  "object": "asset_lookup",
  "results": [
    {
      "aibom": null,
      "asset": {
        "id": "aset_ed96896b57724069849e",
        "object": "asset",
        "created": 1775634081,
        "updated": 1775634081,
        "livemode": false,
        "metadata": {
          "benchmark_match_strategy": "exact",
          "benchmark_matched": "true",
          "benchmark_sources": "leaderboard.json,leaderboard_detail.json,message.txt",
          "context_length": "131072",
          "input_modalities": "text,image",
          "max_completion_tokens": "8192",
          "modality": "text+image->text",
          "model_id": "google/gemma-3-4b-it",
          "model_slug": "google/gemma-3-4b-it",
          "output_modalities": "text",
          "registry": "openrouter",
          "tokenizer": "Gemini"
        },
        "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
        "asset_type": "api_endpoint",
        "name": "Google: Gemma 3 4B",
        "source_url": "https://openrouter.ai/google/gemma-3-4b-it",
        "enrichment_status": "enriched",
        "enriched_at": 1775634081,
        "enrichment_ttl": 1775720481,
        "intrinsic_risk_score": 48,
        "intrinsic_risk_severity": "medium",
        "publisher_trust": "unknown_with_source",
        "first_seen": 1775634073,
        "last_seen": 1775634073,
        "observation_count": 2,
        "benchmark_summary": {
          "matched": true,
          "match_strategy": "exact",
          "matched_key": "gemma-3-4b-it",
          "sources": [
            "leaderboard.json",
            "leaderboard_detail.json",
            "message.txt"
          ],
          "leaderboard_rank": 176,
          "leaderboard_risk_score": 39.109,
          "leaderboard_safety_score": 25.5309,
          "enkrypt_rating": 1.9,
          "validation_score": 40.9770687936,
          "multi_turn_resistance": 6.9620253165,
          "combined_score": 23.969547055
        },
        "findings": "find_6015e4fc064d42a1b6a9",
        "aibom": "abom_88ffe0eacd304dc88483"
      },
      "candidate_count": 1,
      "findings": null,
      "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
      "lookup_key": {
        "name": "no-such-asset",
        "version": "",
        "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327"
      },
      "match_confidence": {
        "score": 100,
        "sources": [
          "fingerprint_exact"
        ]
      },
      "status": "enriched"
    }
  ]
}

Method 8: Name, Version, and Ecosystem

The server supports exact name-plus-version lookups and can align an ecosystem by index. The method is valid even when no matching record exists in the current dataset.

curl -sS --get "https://api.airiskdb.com/v1/assets/lookup" \
  --data-urlencode "lookup_name=filesystem-mcp" \
  --data-urlencode "lookup_version=1.2.3" \
  --data-urlencode "lookup_ecosystem=npm" \
  --data-urlencode "include_candidates=true" \
  -H "Authorization: Bearer $RISKDB_API_KEY"

Response:

{
  "object": "asset_lookup",
  "results": [
    {
      "aibom": null,
      "asset": null,
      "candidates": [],
      "findings": null,
      "lookup_key": {
        "name": "filesystem-mcp",
        "version": "1.2.3",
        "ecosystem": "npm"
      },
      "status": "unknown"
    }
  ]
}

Method 9: Batched Mixed Lookup

You can send exact fingerprints and multiple name-based lookup keys together in a single request. This is the most efficient format for batch resolution pipelines.

curl -sS "https://api.airiskdb.com/v1/assets/lookup?fingerprints=sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327&lookup_name=Google:%20Gemma%203%204B&lookup_name=gemma&lookup_version=&lookup_version=" \
  -H "Authorization: Bearer $RISKDB_API_KEY"

Response:

{
  "object": "asset_lookup",
  "results": [
    {
      "aibom": null,
      "asset": {
        "id": "aset_ed96896b57724069849e",
        "object": "asset",
        "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
        "asset_type": "api_endpoint",
        "name": "Google: Gemma 3 4B",
        "enrichment_status": "enriched",
        "intrinsic_risk_score": 48,
        "intrinsic_risk_severity": "medium"
      },
      "candidate_count": 1,
      "findings": null,
      "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
      "match_confidence": {
        "score": 100,
        "sources": [
          "fingerprint_exact"
        ]
      },
      "status": "enriched"
    },
    {
      "aibom": null,
      "asset": {
        "id": "aset_ed96896b57724069849e",
        "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
        "name": "Google: Gemma 3 4B",
        "enrichment_status": "enriched",
        "intrinsic_risk_score": 48,
        "intrinsic_risk_severity": "medium"
      },
      "candidate_count": 1,
      "findings": null,
      "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
      "lookup_key": {
        "name": "Google: Gemma 3 4B",
        "version": ""
      },
      "match_confidence": {
        "score": 90,
        "sources": [
          "name_exact"
        ]
      },
      "status": "enriched"
    },
    {
      "aibom": null,
      "asset": {
        "id": "aset_ed96896b57724069849e",
        "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
        "name": "Google: Gemma 3 4B",
        "enrichment_status": "enriched",
        "intrinsic_risk_score": 48,
        "intrinsic_risk_severity": "medium"
      },
      "candidate_count": 9,
      "findings": null,
      "fingerprint": "sha256:2aaf7a38fa0eac2236cd4c4fe85ed537779fa8a3875b1f548901612c0b1b3327",
      "lookup_key": {
        "name": "gemma",
        "version": ""
      },
      "match_confidence": {
        "score": 70,
        "sources": [
          "name_keyword_match"
        ]
      },
      "status": "enriched"
    }
  ]
}

Validation Rules

The server enforces these rules:

Combined lookup items across exact fingerprints and lookup keys must be between 1 and 500.
lookup_name is required if lookup_version, lookup_ecosystem, or lookup_fingerprint is present.
lookup_version, lookup_ecosystem, and lookup_fingerprint must have the same item count as lookup_name when provided.
include_candidates must be a boolean-like value.

Accepted boolean forms for include_candidates:

true  false
1     0
yes   no
y     n

Error: Missing `lookup_name`

curl -sS "https://api.airiskdb.com/v1/assets/lookup?lookup_version=1.2.3" \
  -H "Authorization: Bearer $RISKDB_API_KEY"

Response:

{
  "error": {
    "type": "invalid_request_error",
    "code": "invalid_param",
    "param": "lookup_name",
    "message": "The lookup_name query parameter is required when lookup_version, lookup_ecosystem, or lookup_fingerprint is provided.",
    "request_id": "req_f45df22377124cf7b0421b5b"
  }
}

Error: Mismatched Aligned Counts

curl -sS "https://api.airiskdb.com/v1/assets/lookup?lookup_name=gpt-5&lookup_name=gemma&lookup_version=1.0" \
  -H "Authorization: Bearer $RISKDB_API_KEY"

Response:

{
  "error": {
    "type": "invalid_request_error",
    "code": "invalid_param",
    "param": "lookup_version",
    "message": "The lookup_version query parameter count must match lookup_name.",
    "request_id": "req_f2f60f94f6634a91b5c584fc"
  }
}

Error: Invalid `include_candidates`

curl -sS "https://api.airiskdb.com/v1/assets/lookup?lookup_name=gemma&include_candidates=maybe" \
  -H "Authorization: Bearer $RISKDB_API_KEY"

Response:

{
  "error": {
    "type": "invalid_request_error",
    "code": "invalid_param",
    "param": "include_candidates",
    "message": "The include_candidates query parameter must be a boolean value.",
    "request_id": "req_7b05a8eca1d74e049ac0eab9"
  }
}

Asset Lookup

On this page