Skip to main content
The Complior engine runs as a background daemon and exposes an HTTP API on localhost:3578. All tools (CLI, TUI, MCP server) communicate with the engine through this API.
The API is local-only by default. No authentication required. The daemon binds to 127.0.0.1 and is not accessible from the network.

​
Base URL

http://localhost:3578
Override with --port when starting the daemon: 
complior daemon start --port 4000

​
Response format

All endpoints return JSON. Errors follow a consistent format: 
{
  "error": "Not found",
  "status": 404,
  "details": "No scan results available. Run `complior scan` first."
}

​
Endpoint groups

Scan & Eval

Static analysis, deep scan, diff, SBOM generation, and dynamic evaluation with 680 probes.

Fix & Remediation

Preview, apply, undo fixes. Batch operations with validation.

Agent & Passport

Passport CRUD, FRIA generation, evidence chain, export, audit trail, and document generation.

System

Engine status, SSE events, file operations, onboarding, badges, sharing, and sync.

​
SSE streaming

Some endpoints return Server-Sent Events for real-time progress:
EndpointDescription
GET /eventsGlobal event stream (scan results, score updates, gate events)
POST /eval/run/streamEval progress with per-probe updates
POST /chatLLM chat responses streamed token-by-token

​
Quick examples

curl -X POST http://localhost:3578/scan \
  -H "Content-Type: application/json" \
  -d '{"path": "."}'