Assess Model
assess_modelEvaluate a threat model's control objectives deterministically and read-only, returning mitigated, at-risk, and unassessed counts plus defined, implemented, and verified metrics.
Instructions
Run the deterministic assurance assessment over a threat model. Read-only — no LLM calls, no mutation.
Evaluates each control objective from its controls' implementation
status and returns summary counts (mitigated / at_risk /
unassessed) plus progressive metrics (defined / implemented /
verified). For LLM-based reasoning about which COs are
under-covered and what controls to add, use check_control_gaps
instead.
Use summary_only=True to get just the counts without per-CO assessments.
Paging: a read with limit that leaves pages beyond its own names a
snapshot of the whole assessment, with snapshot_expires_at. Pass
it back with each later page: the pages are then served from that one
evaluation, as of its evaluated_at, so they agree with each other and
nothing is evaluated again. A snapshot is kept for 10 minutes, and only
the 5 newest of a model, so other paged reads of the model can replace
it sooner. One not found comes back as {http_status: 410, code: "snapshot_not_found", message}: read again without it, from the first
page.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max control objectives to return (0 = all). | |
| offset | No | Skip the first N control objectives. | |
| status | No | Optional filter — "mitigated", "at_risk", or "unassessed". | |
| model_id | Yes | ID of the threat model to assess. | |
| snapshot | No | The ``snapshot`` an earlier page named; empty (default) evaluates the model now. | |
| summary_only | No | If True, return only summary counts (no per-CO details). | |
| server_version | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||