DTM™

Technical Documentation
API REFERENCE

Aegis DTM Control Plane — API Documentation

January 12, 2024
Engineering Team
Type: API REFERENCE

Attribution: DTM (Dynamic Threat Mitigation) designed by Dr. Todd M. Price. CART (Continuous Automated Red-Teaming) and PQE (Post-Quantum Engineering) built into the SaaS platform by Price-Oquindo.

Overview

The DTM API exposes read/write endpoints for policy, decisions, evidence, and integrations with CART and PQE. Authentication via OAuth2 client credentials; all endpoints require TLS 1.3+ with hybrid PQC where negotiated.

Authentication
  • Auth: OAuth2 (client_credentials)
  • Header: Authorization: Bearer {token}
  • Scopes: dtm.read, dtm.write, evidence.write, policy.admin
Key Endpoints

POST /v1/decisions

Request a decision for an action

Request: {"subject":"svc:gateway-01","action":"negotiate_cipher",...}

POST /v1/evidence

Submit evidence artifact

Content-Type: multipart/form-data

GET /v1/policies

List policies with versions

Query: ?type=crypto&limit=50

POST /v1/carts/run

Trigger a CART scenario suite

Body: {"suite_id":"downgrade-01","env":"staging"}
Error Codes
  • 400 Bad Request — invalid payload
  • 401 Unauthorized — missing/invalid token
  • 403 Forbidden — insufficient scope
  • 409 Conflict — policy version conflict
  • 429 Too Many Requests — rate limit exceeded
  • 500 Internal Server Error
Webhooks

decision.created, decision.updated, evidence.accepted, cart.run.completed

Rate Limits & SLAs
  • Rate Limits: 600 requests/min per client; burst 1200/min
  • Availability: 99.95% monthly SLA

TECHNICAL DOCUMENTATION | Aegis Project — DTM API Reference