# Mesh Global Software CBOM Export

<span
  className={"theme-doc-version-badge badge badge--secondary"}
  children={"Version: 1.1.0"}
>
</span>

<Export
  url={"/openapi/cbom-export.yaml"}
  proxy={undefined}
>
  
</Export>

<Heading
  as={"h1"}
  className={"openapi__heading"}
  children={"Mesh Global Software CBOM Export"}
>
</Heading>

Returns a CycloneDX 1.6 Crypto Bill of Materials (CBOM) for a piece of
software, drawn from Axiad Mesh's global software catalog. Intended for
vendor and procurement CBOM consumption — for example, evaluating the
post-quantum readiness of software before you adopt it.

This endpoint is **not** tenant-scoped: it serves only public catalog data
and returns the same result for every authenticated caller. Authentication
is still required (see Security).

<div
  style={{"marginBottom":"2rem"}}
>
  <Heading
    id={"authentication"}
    as={"h2"}
    className={"openapi-tabs__heading"}
    children={"Authentication"}
  >
  </Heading><SchemaTabs
    className={"openapi-tabs__security-schemes"}
  >
    <TabItem
      label={"HTTP: Bearer Auth"}
      value={"azureAdBearer"}
    >
      
      
      A bearer access token obtained through the standard OAuth 2.0 flow (the
      same authentication used by the rest of the Axiad Mesh API). Present it
      in the `Authorization: Bearer <token>` header. See
      [API Authentication](/docs/api-reference/authentication) for how to
      obtain a token.
      
      
      <div>
        <table>
          <tbody>
            <tr>
              <th>
                Security Scheme Type:
              </th><td>
                http
              </td>
            </tr><tr>
              <th>
                HTTP Authorization Scheme:
              </th><td>
                bearer
              </td>
            </tr><tr>
              <th>
                Bearer format:
              </th><td>
                JWT
              </td>
            </tr>
          </tbody>
        </table>
      </div>
    </TabItem>
  </SchemaTabs>
</div>