<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# Performing Attack Surface Threat Modeling — API Reference

## agent.js CLI

```bash
node scripts/agent.js --action enumerate
node scripts/agent.js --action classify --input entry_points.json
node scripts/agent.js --action score --input classified.json
node scripts/agent.js --action report --input scored.json --output report.json
```

## Entry Point JSON Schema

```json
{
  "name": "Endpoint or service name",
  "category": "network | application | human | physical | supply_chain",
  "auth_required": true,
  "internet_facing": true
}
```

## Surface Categories

| Category | Weight | Examples |
|----------|--------|----------|
| network | 0.9 | Open ports, VPN endpoints |
| application | 1.0 | APIs, web forms, uploads |
| human | 0.7 | Phishing, help desk |
| physical | 0.5 | USB, console access |
| supply_chain | 0.8 | Third-party libs, CI/CD |
