<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->

# API Reference — Building Incident Runbook Library

## Endpoints

| Endpoint | Method | Purpose |
|---|---|---|
| `POST /api/runbooks` | POST | Create a new runbook |
| `GET /api/runbooks` | GET | List all runbooks |
| `GET /api/runbooks/{name}/validate` | GET | Validate runbook completeness |
| `PUT /api/runbooks/{name}` | PUT | Update an existing runbook |

## Agent Script

```bash
node agent.js create --type ransomware --severity S1 --owner "ir-team-lead"
node agent.js validate --runbook ransomware-response
node agent.js list-runbooks --format table
```
