PlatPhorm API - Network API Registry and Gateway

desa.platphormnews.com

Observed 2026-08-23T07:04:17.129Z from graph node desa. Evidence bodies are hashed and previews are bounded/redacted.

api

mcp

feeds

health

100

overall

discovery

100

consistency

Declared vs observed

Capability	Declared	Observed	Valid	Complete	Status	Latency	URL
health	Yes	Yes	Yes	Yes	valid	760 ms	https://desa.platphormnews.com/api/health
openapi	Yes	Yes	Yes	No	valid	17 ms	https://desa.platphormnews.com/api/docs
mcp	Yes	Yes	No	No	invalid	65 ms	https://desa.platphormnews.com/api/mcp
mcpManifest	Yes	Yes	Yes	No	valid	52 ms	https://desa.platphormnews.com/.well-known/mcp.json
llms	Yes	Yes	Yes	Yes	valid	10 ms	https://desa.platphormnews.com/llms.txt
llmsIndex	Yes	Yes	Yes	Yes	valid	46 ms	https://desa.platphormnews.com/llms-index.json
rss	Yes	Yes	Yes	Yes	valid	24 ms	https://desa.platphormnews.com/rss.xml
atom	Yes	Yes	Yes	Yes	valid	19 ms	https://desa.platphormnews.com/atom.xml
openai	Yes	Yes	Yes	Yes	valid	46 ms	https://desa.platphormnews.com/.well-known/ai-plugin.json
sitemap	Yes	Yes	Yes	Yes	valid	20 ms	https://desa.platphormnews.com/sitemap.xml
robots	No	Yes	Yes	Yes	valid	29 ms	https://desa.platphormnews.com/robots.txt
trust	No	Yes	Yes	Yes	valid	163 ms	https://desa.platphormnews.com/.well-known/trust.json
agents	No	Yes	Yes	Yes	valid	91 ms	https://desa.platphormnews.com/.well-known/agents.json
manifest	No	Yes	Yes	Yes	valid	26 ms	https://desa.platphormnews.com/manifest.webmanifest

Findings and evidence

mediumOPENAPI_MISSING_OPERATION_ID

3 operations lack operationId

Add stable operationId values for client and MCP correlation.

GET https://desa.platphormnews.com/api/docs
HTTP 200
Content-Type: application/json
17 ms
Digest: sha256:41b62892c665d5f653c2f35b76deeb0b58a506b9ec6fb1855d6f91550654731d
Preview: {"openapi":"3.0.3","info":{"title":"-desa API","version":"1.0.0","description":"Discovery and health endpoints for -desa","termsOfService":"https://-desa.platphormnews.com/terms"},"servers":[{"url":"https://-desa.platphormnews.com","description":"Production"}],"paths":{"/api/health":{"get":{"summary":"Health check","responses":{"200":{"description":"ok"}}}},"/api/v1/health":{"get":{"summary":"Health check v1","responses":{"200":{"description":"ok"}}}},"/api/v1/mcp":{"get":{"summary":"MCP configuration","responses":{"200":{"description":"mcp config"}}}}}}

highMCP_METADATA_INVALID

JSON response lacks usable MCP metadata

Expose protocol version, endpoint, server identity, or capabilities.

GET https://desa.platphormnews.com/api/mcp
HTTP 200
Content-Type: application/json
65 ms
Digest: sha256:64bd0fbbe7cd53ec25e01a9c578403d792d188b1d554c6f11dd99127d6039f82
Preview: {"ok":true,"success":true,"data":{"service":"desa-mcp","protocolVersion":"2024-11-05","endpoint":"/api/mcp","staticOnly":true,"executionDisabled":true,"tools":[{"name":"analyze_script","description":"Statically analyze script content for decoding, suspicious patterns, IOCs, rule matches, and deterministic risk scoring.","inputSchema":{"type":"object","properties":{"content":{"type":"string"},"analysis_type":{"type":"string"}},"required":["content"]}},{"name":"decode_powershell","description":"Decode PowerShell encoded commands, Base64, UTF-16LE, hex, and auto-detected encoded content without execution.","inputSchema":{"type":"object","properties":{"content":{"type":"string"},"encoding":{"type":"string"}},"required":["content"]}},{"name":"extract_iocs","description":"Extract public-safe IOCs from supplied text.","inputSchema":{"type":"object","properties":{"content":{"type":"string"}},"required":["content"]}},{"name":"list_rules","description":"List deterministic DESA detection rules.","inputSchema":{"type":"object","properties":{"category":{"type":"string"},"severity":{"type":"string"}}}},{"name":"get_rule","description":"Get a deterministic DESA detection rule by id.","inputSchema":{"type":"object","properties":{"ruleId":{"type":"string"}},"required":["ruleId"]}},{"name":"list_samples","description":"List public-safe DESA sample scripts.","inputSchema":{"type":"object","properties":{}}},{"name":"get_sample","description":"Get a public-safe DESA sample by id.","inputSchema":{"type":"object","properties":{"id":{"type":"string"}},"required":["id"]}},{"name":"export_analysis","description":"Export caller-provided or freshly analyzed data as JSON, Markdown, CSV, STIX, OpenIOC, MISP, or SARIF.","inputSchema":{"type":"object","properties":{"content":{"type":"string"},"format":{"type":"string"}}}},{"name":"send_to_json_tree","description":"Format JSON locally for JSON Tree handoff when the remote service is unavailable.","inputSchema":{"type":"object","properties":{"data":{}},"required":["data"]}},{"name":"send_to_ascii

GET https://desa.platphormnews.com/rss.xml HTTP 200 Content-Type: application/rss+xml; charset=utf-8 24 ms Digest: sha256:b50a0c8e962ff1ca1d3571a64444e068b9aa0def1a4c33dc46502f182b538057 Preview: <?xml version="1.0" encoding="UTF-8"?> <rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"> <channel> <title>DESA - Dynamic Encoded Script Analysis</title> <link>https://desa.platphormnews.com</link> <description>Public-safe DESA guidance, detection-rule, and API updates. Submitted scripts and private analysis results are never included.</description> <language>en-us</language> <lastBuildDate>Sun, 23 Aug 2026 07:03:55 GMT</lastBuildDate> <atom:link href="https://desa.platphormnews.com/rss.xml" rel="self" type="application/rss+xml"/> <item> <title>DESA Phase 1 static analyzer contract</title> <link>https://desa.platphormnews.com/guidance</link> <guid isPermaLink="false">desa:phase-1-static-analysis</guid> <pubDate>Sun, 10 May 2026 00:00:00 GMT</pubDate> <description>DESA documents public-safe static analysis, no-execution policy, bounded URL fetching, IOC extraction, and deterministic rule matching.</description> <category>guidance</category> </item> <item> <title>DESA MCP and API surface</title> <link>https://desa.platphormnews.com/docs</link> <guid isPermaLink="false">desa:phase-1-mcp-api</guid> <pubDate>Sun, 10 May 2026 00:00:00 GMT</pubDate> <description>DESA exposes public-safe REST endpoints, OpenAPI, and JSON-RPC MCP tooling for deterministic encoded-script analysis.</description> <category>api</category> </item> <item> <title>Deterministic detection rules</title> <link>https://desa.platphormnews.com/rules</link> <guid isPermaLink="false">desa:phase-1-rules</guid> <pubDate>Sun, 10 May 2026 00:00:00 GMT</pubDate> <description>DESA detection rules are listed from backend storage when available and from an honest built-in degraded fallback otherwise.</description> <category>rules</category> </item> </channel> </rss>

GET https://desa.platphormnews.com/robots.txt HTTP 200 Content-Type: text/plain; charset=utf-8 29 ms Digest: sha256:097bd4ddf0a9018c4b406d990cec58f33ad908d0f58be0e2fa818be7b02bded0 Preview: User-Agent: * Allow: / Allow: /llms.txt Allow: /llms-full.txt Allow: /llms-index.json Allow: /openapi.json Allow: /openapi.yaml Allow: /api/docs Allow: /api/mcp Allow: /.well-known/mcp.json Allow: /.well-known/agents.json Allow: /.well-known/security.txt Allow: /.well-known/trust.json Allow: /rss.xml Allow: /feed.xml Allow: /sitemap.xml Allow: /sitemap-main.xml Allow: /humans.txt Disallow: /api/v1/ Disallow: /script/ User-Agent: GPTBot Allow: / Allow: /llms.txt Allow: /llms-full.txt Allow: /llms-index.json Allow: /openapi.json Allow: /openapi.yaml Allow: /api/docs Allow: /api/mcp Allow: /.well-known/mcp.json Allow: /.well-known/agents.json Allow: /.well-known/security.txt Allow: /.well-known/trust.json Allow: /rss.xml Allow: /feed.xml Allow: /sitemap.xml Allow: /sitemap-main.xml Allow: /humans.txt Allow: /docs Allow: /guidance Allow: /faq Allow: /rules User-Agent: Claude-Web Allow: / Allow: /llms.txt Allow: /llms-full.txt Allow: /llms-index.json Allow: /openapi.json Allow: /openapi.yaml Allow: /api/docs Allow: /api/mcp Allow: /.well-known/mcp.json Allow: /.well-known/agents.json Allow: /.well-known/security.txt Allow: /.well-known/trust.json Allow: /rss.xml Allow: /feed.xml Allow: /sitemap.xml Allow: /sitemap-main.xml Allow: /humans.txt Allow: /docs Allow: /guidance Allow: /faq Allow: /rules User-Agent: PerplexityBot Allow: / Allow: /llms.txt Allow: /llms-full.txt Allow: /llms-index.json Allow: /openapi.json Allow: /openapi.yaml Allow: /api/docs Allow: /api/mcp Allow: /.well-known/mcp.json Allow: /.well-known/agents.json Allow: /.well-known/security.txt Allow: /.well-known/trust.json Allow: /rss.xml Allow: /feed.xml Allow: /sitemap.xml Allow: /sitemap-main.xml Allow: /humans.txt Allow: /docs Allow: /guidance Allow: /faq Allow: /rules Host: https://desa.platphormnews.com Sitemap: https://desa.platphormnews.com/sitemap.xml Sitemap: https://desa.platphormnews.com/sitemap-main.xml

GET https://desa.platphormnews.com/.well-known/trust.json HTTP 200 Content-Type: application/json 163 ms Digest: sha256:f1d53d48d299745d1f13d3cd0aaa7bd8f8b000a2008e24904c3539964fa61806 Preview: {"service":"desa","version":"1.0.0","publicSafeAccessEnabled":true,"staticOnlyAnalysis":true,"noExecutionPolicy":{"scriptsExecuted":false,"powershellInvoked":false,"decodedPayloadsExecuted":false,"embeddedPayloadUrlsFetched":false},"auth":{"requirement":"future-protected","enforced":false,"acceptedHeaders":["Authorization: [REDACTED] $PLATPHORM_API_KEY","X-PlatPhorm-API-Key: [REDACTED],"environmentVariable":"PLATPHORM_API_KEY","publicSafeDefault":true},"sourceDataHandling":{"submittedScripts":"returned to caller only; not included in public feeds, sitemap, llms, or discovery output","localHistory":"browser-local metadata history where available; no PLATPHORM_API_KEY storage","backendPersistence":"metadata-oriented and future protected for private persistence"},"detectionRules":"public deterministic rules; mutation is future protected","modelScaffolding":"server-only, degraded until protected provider configuration exists","integrations":{"jsonAsciiXml":"public-safe calls with local degraded fallbacks where possible","trace":"trace context accepted and propagated in response metadata","reports":"Docs/Sheets/Decks report generation is scaffolded and degraded until protected configuration exists"},"trustedDomains":{"default":"*.platphormnews.com","rootGraph":"https://platphormnews.com/api/network/graph","baseSitemapIndex":"https://base.platphormnews.com/sitemap-index.xml","ssrf":"localhost, private IPs, link-local, metadata services, credentials, and redirects are blocked for public URL fetches"},"routeStandard":["/","/analyze","/iocs","/history","/rules","/integrations","/docs","/settings","/faq","/guidance","/roadmap","/contributors","/privacy","/license","/api/docs","/openapi.json","/openapi.yaml","/llms.txt","/llms-full.txt","/llms-index.json","/rss.xml","/feed.xml","/sitemap.xml","/sitemap-main.xml","/robots.txt","/manifest.webmanifest","/humans.txt","/.well-known/mcp.json","/.well-known/agents.json","/.well-known/ai-plugin.json","/.well-known/security.txt","/.well-known/trust.json"],"vercelMetadataPolicy

infoUNDECLARED_CAPABILITY_OBSERVED

Undeclared manifest capability was observed

https://desa.platphormnews.com/manifest.webmanifest

GET https://desa.platphormnews.com/manifest.webmanifest
HTTP 200
Content-Type: application/manifest+json; charset=utf-8
26 ms
Digest: sha256:8e9803c75dc24347533d67f9f36222f922045cb4380451611348faf76736269d
Preview: {"name":"DESA — Dynamic Encoded Script Analysis","short_name":"DESA","description":"Free online PowerShell script analyzer. Decode, deobfuscate, detect malware, extract IOCs and map MITRE ATT&CK techniques — all in your browser.","start_url":"/","display":"standalone","background_color":"#0f172a","theme_color":"#14b8a6","orientation":"portrait-primary","scope":"/","categories":["security","developer tools","utilities"],"lang":"en-US","dir":"ltr","icons":[{"src":"/favicon.svg","sizes":"any","type":"image/svg+xml","purpose":"any"},{"src":"/icon.svg","sizes":"any","type":"image/svg+xml","purpose":"maskable"},{"src":"/apple-touch-icon.svg","sizes":"180x180","type":"image/svg+xml","purpose":"any"}],"screenshots":[{"src":"/screenshots/analysis.png","sizes":"1280x720","type":"image/png","label":"Script Analysis Interface"}],"shortcuts":[{"name":"Analyze Script","short_name":"Analyze","description":"Start a new PowerShell script analysis","url":"/","icons":[{"src":"/favicon.svg","sizes":"any"}]},{"name":"IOC Viewer","short_name":"IOCs","description":"Visualize and explore Indicators of Compromise","url":"/iocs","icons":[{"src":"/favicon.svg","sizes":"any"}]},{"name":"View History","short_name":"History","description":"View past analysis results","url":"/history","icons":[{"src":"/favicon.svg","sizes":"any"}]},{"name":"API Docs","short_name":"Docs","description":"Browse the DESA API documentation","url":"/docs","icons":[{"src":"/favicon.svg","sizes":"any"}]}],"related_applications":[{"platform":"webapp","url":"https://msi.platphormnews.com/manifest.json","id":"msi.platphormnews.com"},{"platform":"webapp","url":"https://json.platphormnews.com/manifest.json","id":"json.platphormnews.com"},{"platform":"webapp","url":"https://kanban.platphormnews.com/manifest.json","id":"kanban.platphormnews.com"},{"platform":"webapp","url":"https://svg.platphormnews.com/manifest.json","id":"svg.platphormnews.com"},{"platform":"webapp","url":"https://mcp.platphormnews.com/manifest.json","id":"mcp.platphormnews.com"},{"platform":"webapp","url"

desa.platphormnews.com

Declared vs observed

Findings and evidence

3 operations lack operationId

JSON response lacks usable MCP metadata

2 duplicate RSS GUIDs found

Undeclared robots capability was observed

Undeclared trust capability was observed

Undeclared agents capability was observed

Undeclared manifest capability was observed