{"service":"desa","version":"1.0.0","baseUrl":"https://desa.platphormnews.com","updatedAt":"2026-07-18T01:30:50.473Z","endpoints":[{"path":"/","url":"https://desa.platphormnews.com","kind":"page","title":"Analyze","public":true},{"path":"/analyze","url":"https://desa.platphormnews.com/analyze","kind":"page","title":"Analyze Workbench","public":true},{"path":"/iocs","url":"https://desa.platphormnews.com/iocs","kind":"page","title":"IOCs","public":true},{"path":"/history","url":"https://desa.platphormnews.com/history","kind":"page","title":"History","public":true},{"path":"/rules","url":"https://desa.platphormnews.com/rules","kind":"page","title":"Detection Rules","public":true},{"path":"/integrations","url":"https://desa.platphormnews.com/integrations","kind":"page","title":"Integrations","public":true},{"path":"/docs","url":"https://desa.platphormnews.com/docs","kind":"docs","title":"Docs","public":true},{"path":"/settings","url":"https://desa.platphormnews.com/settings","kind":"page","title":"Settings","public":true},{"path":"/faq","url":"https://desa.platphormnews.com/faq","kind":"docs","title":"FAQ","public":true},{"path":"/guidance","url":"https://desa.platphormnews.com/guidance","kind":"docs","title":"Guidance","public":true},{"path":"/roadmap","url":"https://desa.platphormnews.com/roadmap","kind":"docs","title":"Roadmap","public":true},{"path":"/contributors","url":"https://desa.platphormnews.com/contributors","kind":"docs","title":"Contributors","public":true},{"path":"/privacy","url":"https://desa.platphormnews.com/privacy","kind":"docs","title":"Privacy","public":true},{"path":"/license","url":"https://desa.platphormnews.com/license","kind":"docs","title":"License","public":true},{"path":"/api/docs","url":"https://desa.platphormnews.com/api/docs","kind":"discovery","title":"API Docs","public":true},{"path":"/openapi.json","url":"https://desa.platphormnews.com/openapi.json","kind":"discovery","title":"OpenAPI JSON","public":true},{"path":"/openapi.yaml","url":"https://desa.platphormnews.com/openapi.yaml","kind":"discovery","title":"OpenAPI YAML","public":true},{"path":"/llms.txt","url":"https://desa.platphormnews.com/llms.txt","kind":"discovery","title":"LLMs.txt","public":true},{"path":"/llms-full.txt","url":"https://desa.platphormnews.com/llms-full.txt","kind":"discovery","title":"Full LLM Context","public":true},{"path":"/llms-index.json","url":"https://desa.platphormnews.com/llms-index.json","kind":"discovery","title":"LLMs Index","public":true},{"path":"/rss.xml","url":"https://desa.platphormnews.com/rss.xml","kind":"feed","title":"RSS","public":true},{"path":"/feed.xml","url":"https://desa.platphormnews.com/feed.xml","kind":"feed","title":"Feed","public":true},{"path":"/sitemap.xml","url":"https://desa.platphormnews.com/sitemap.xml","kind":"discovery","title":"Sitemap","public":true},{"path":"/sitemap-main.xml","url":"https://desa.platphormnews.com/sitemap-main.xml","kind":"discovery","title":"Main Sitemap","public":true},{"path":"/robots.txt","url":"https://desa.platphormnews.com/robots.txt","kind":"discovery","title":"Robots","public":true},{"path":"/manifest.webmanifest","url":"https://desa.platphormnews.com/manifest.webmanifest","kind":"discovery","title":"Web Manifest","public":true},{"path":"/humans.txt","url":"https://desa.platphormnews.com/humans.txt","kind":"docs","title":"Humans","public":true},{"path":"/.well-known/mcp.json","url":"https://desa.platphormnews.com/.well-known/mcp.json","kind":"well-known","title":"MCP Well-Known","public":true},{"path":"/.well-known/agents.json","url":"https://desa.platphormnews.com/.well-known/agents.json","kind":"well-known","title":"Agents Well-Known","public":true},{"path":"/.well-known/ai-plugin.json","url":"https://desa.platphormnews.com/.well-known/ai-plugin.json","kind":"well-known","title":"AI Plugin","public":true},{"path":"/.well-known/security.txt","url":"https://desa.platphormnews.com/.well-known/security.txt","kind":"well-known","title":"Security Contact","public":true},{"path":"/.well-known/trust.json","url":"https://desa.platphormnews.com/.well-known/trust.json","kind":"well-known","title":"Trust Policy","public":true}],"authPolicy":{"requirement":"future-protected","enforced":false,"acceptedHeaders":["Authorization: Bearer $PLATPHORM_API_KEY","X-PlatPhorm-API-Key: $PLATPHORM_API_KEY"],"environmentVariable":"PLATPHORM_API_KEY","publicSafeDefault":true},"publicAccess":{"default":true,"staticAnalysis":true,"uploads":"public-safe, 5 MB max","urlFetch":"public-safe with SSRF protection, no redirects, 5 MB max","localHistory":"browser-only metadata; raw scripts are not stored server-side without protected policy"},"analyzer":{"staticOnly":true,"executionDisabled":true,"deterministic":true,"capabilities":["PowerShell encoded-command detection","Base64 and UTF-16LE decoding","hex and character-code deobfuscation","suspicious token and command-line flag matching","IOC extraction","deterministic risk scoring","MITRE-style rule mapping where rules support it"]},"rules":{"activeCount":20,"endpoint":"/api/v1/rules","source":"database when available; built-in in-memory rules when storage is degraded"},"samples":[{"id":"encoded-command-download-cradle","title":"Encoded PowerShell Download Cradle","description":"Public-safe static sample containing an encoded command, IEX, and a test documentation URL."},{"id":"registry-persistence","title":"Registry Persistence Indicator","description":"Public-safe static sample with registry run-key persistence and hidden PowerShell flags."}],"integrations":[{"id":"json-tree","label":"JSON Tree","baseUrl":"https://json.platphormnews.com","status":"degraded-capable"},{"id":"ascii","label":"ASCII Converter","baseUrl":"https://ascii.platphormnews.com","status":"degraded-capable"},{"id":"xml","label":"XML Validator","baseUrl":"https://xml.platphormnews.com","status":"degraded-capable"},{"id":"mcp","label":"MCP Tools","baseUrl":"https://mcp.platphormnews.com","status":"read-only-capable"},{"id":"trace","label":"Trace","baseUrl":"https://trace.platphormnews.com","status":"scaffolded"},{"id":"docs","label":"Docs","baseUrl":"https://docs.platphormnews.com","status":"scaffolded"},{"id":"sheets","label":"Sheets","baseUrl":"https://sheets.platphormnews.com","status":"scaffolded"},{"id":"decks","label":"Decks","baseUrl":"https://decks.platphormnews.com","status":"scaffolded"}],"modelScaffolding":{"status":"degraded","serverOnly":true,"providerNeutral":true,"deterministicFallback":true},"tools":["analyze_script","decode_powershell","extract_iocs","list_rules","get_rule","list_samples","get_sample","export_analysis","send_to_json_tree","send_to_ascii","send_to_xml","get_health","get_info","get_route_compliance","get_discovery_compliance","create_docs_report","create_sheet_report","create_deck_summary"],"resources":["desa://rules","desa://rule/{ruleId}","desa://samples","desa://sample/{id}","desa://analysis/{id}","desa://iocs/{analysisId}","desa://guidance","desa://roadmap","desa://openapi","desa://llms","desa://trust-policy"],"prompts":["analyze_powershell_script","explain_encoded_command","summarize_iocs","explain_detection_rules","create_defensive_report","generate_detection_guidance","review_false_positive","human_machine_desa_handoff"],"trustedDomains":{"default":"*.platphormnews.com","rootGraph":"https://platphormnews.com/api/network/graph","baseSitemapIndex":"https://base.platphormnews.com/sitemap-index.xml","ssrfProtection":"blocks localhost, private IPs, link-local, metadata services, and redirects for public URL analysis"},"routeStandard":["/","/analyze","/iocs","/history","/rules","/integrations","/docs","/settings","/faq","/guidance","/roadmap","/contributors","/privacy","/license","/api/docs","/openapi.json","/openapi.yaml","/llms.txt","/llms-full.txt","/llms-index.json","/rss.xml","/feed.xml","/sitemap.xml","/sitemap-main.xml","/robots.txt","/manifest.webmanifest","/humans.txt","/.well-known/mcp.json","/.well-known/agents.json","/.well-known/ai-plugin.json","/.well-known/security.txt","/.well-known/trust.json"],"integrationsStatus":[{"id":"json-tree","label":"JSON Tree","baseUrl":"https://json.platphormnews.com","status":"degraded-capable"},{"id":"ascii","label":"ASCII Converter","baseUrl":"https://ascii.platphormnews.com","status":"degraded-capable"},{"id":"xml","label":"XML Validator","baseUrl":"https://xml.platphormnews.com","status":"degraded-capable"},{"id":"mcp","label":"MCP Tools","baseUrl":"https://mcp.platphormnews.com","status":"read-only-capable"},{"id":"trace","label":"Trace","baseUrl":"https://trace.platphormnews.com","status":"scaffolded"},{"id":"docs","label":"Docs","baseUrl":"https://docs.platphormnews.com","status":"scaffolded"},{"id":"sheets","label":"Sheets","baseUrl":"https://sheets.platphormnews.com","status":"scaffolded"},{"id":"decks","label":"Decks","baseUrl":"https://decks.platphormnews.com","status":"scaffolded"}],"trustPolicy":"Public-safe static encoded-script analysis, PowerShell decoding, IOC extraction, detection-rule browsing, local non-sensitive analysis history, read-only MCP introspection, RSS/feed consumption, trusted-domain discovery, standard route compliance, Vercel metadata capture, backend model scaffolding, and trace-linked DESA operations are intentionally supported for public defensive use. DESA does not execute submitted scripts. PLATPHORM_API_KEY support is scaffolded for future protected backend services, private analysis persistence, bulk analysis, sync, test-triggering, reporting, administrative actions, and sensitive operations."}