Install Jentic One Beta

Connect the LGTM API to your agent

Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the LGTM API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.

Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.

Step 1: Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Flgtm.com%2Flgtm" | sh

Step 2: Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Flgtm.com%2Flgtm" | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.

Capabilities

What an agent can do with LGTM API.

Run analysis of a specific commit on a project

Request a code review for a patch and read its results

Submit a CodeQL query job across one or more projects

Read detailed security alerts surfaced by an analysis

Add a project to LGTM and manage its analysis configuration

GET STARTED

Start building with LGTM API

Explore with Jentic One

View OpenAPI Document

Use Cases

Patterns agents use LGTM API for, with concrete tasks.

★ Agent-driven code review through Jentic

An AI agent reviewing a pull request can submit the patch for automated code review and read back the alerts it raises. Through Jentic the agent discovers the review operation by intent and loads its input schema, so it can gate a change on the results without hand-wiring the LGTM endpoints.

Search Jentic for 'run a code review', submit a patch for a project, and read the resulting alerts.

Commit analysis in a CI gate

Trigger analysis of a specific commit and poll the operation until it completes, then read the alerts to decide whether to block a merge. LGTM ties each analysis to a project and commit, so results map cleanly onto the change under review.

Request analysis of a commit, poll the operation status until done, and read the alerts for that analysis.

Fleet-wide CodeQL query

Run a single CodeQL query across many projects at once to find a vulnerability pattern fleet-wide, then fetch per-project results. Query jobs run asynchronously and report progress through the operations endpoint.

Create a CodeQL query job over several projects, then fetch the results overview and per-project results once it finishes.

Key Endpoints

29 endpoints — the lgtm api runs automated code analysis and codeql queries across your projects and returns the security alerts they surface.

METHOD

PATH

DESCRIPTION

GET

/projects

List projects

POST

/projects

Add a project to LGTM

POST

/analyses/{project-id}

Run analysis of a specific commit

GET

/analyses/{analysis-id}/alerts

Get detailed alert information

POST

/codereviews/{project-id}

Run code review for a patch

POST

/queryjobs

Run a CodeQL query on one or more projects

GET

/operations/{operation-id}

Get operation status

GET

/projects

List projects

POST

/projects

Add a project to LGTM

POST

/analyses/{project-id}

Run analysis of a specific commit

GET

/analyses/{analysis-id}/alerts

Get detailed alert information

POST

/codereviews/{project-id}

Run code review for a patch

POST

/queryjobs

Run a CodeQL query on one or more projects

GET

/operations/{operation-id}

Get operation status

Why Jentic?

What agents get from Jentic-routed access to this vendor.

Setup

Wiring LGTM by hand means creating an access token, handling its asynchronous analysis and query jobs, and polling operation status yourself. Through Jentic you install once, import LGTM from the API Directory, store the token once, and your agent calls it.

Permission scoping

LGTM puts the project id in the URL path, so a rule can pin your agent to one project. You choose the operations it may call, such as running analysis and reading alerts, so deleting a project is not included unless you add it.

Credential isolation

Your LGTM access token is stored once, encrypted, by your own Jentic One instance and injected at execution time. It never enters the agent's prompt, logs, or context.

Intent-based discovery

Agents search Jentic by intent such as 'run a code review' or 'run a CodeQL query', and Jentic returns the matching LGTM operation with its input schema so the agent calls the right endpoint without browsing the reference docs.

FAQs

Specific to using LGTM API through Jentic.

What authentication does the LGTM API use?

The LGTM API accepts a bearer access token per its OpenAPI spec: create a token in your account settings and send it in the Authorization header. Some read operations are available without a token, while enterprise use and query submission need one. Through Jentic the token is stored encrypted by your own Jentic One instance and injected at request time.

Is there a LGTM API MCP server?

You don't need an MCP server to give your agent the LGTM API. Jentic connects it directly from the API Directory: import it, store your credential once, and your agent calls it on demand without loading another server's tool definitions into its context.

Can I run a CodeQL query across projects with the LGTM API?

Yes. Submit a query job over one or more projects, then fetch the results overview and the per-project results once the job completes. Progress is reported through the operations endpoint.

What are the rate limits for the LGTM API?

The OpenAPI spec does not specify rate limits. Check the LGTM documentation at https://lgtm.com/help/lgtm/api for current limits before submitting large query jobs.

Can I limit what my agent is allowed to do with the LGTM API?

Yes. LGTM puts the project id in the URL path, so a rule can pin your agent to one project and the read and analysis operations it needs, while withholding project deletion unless you add it. Every call it makes is logged.

How do I run a code review with the LGTM API through Jentic?

Search Jentic for 'run a code review', load the code-review operation, and pass the project id and patch. Jentic injects your access token and returns the review results. To run it on your own infrastructure, install Jentic One from its GitHub repo.

LGTM API

Community OpenAPI document · agent-readySecurityVulnerability Managementbearer29 EndpointsREST

Know of an official OpenAPI document? Contribute it →

For Agents

Run code analysis and CodeQL queries across projects, request code reviews on patches, and read the alerts and operation status they produce.

Use for: I need to run analysis on the latest commit, Request a code review for this patch, Run a CodeQL query across several projects, Get the security alerts for an analysis

Not supported: Does not host source code, run CI pipelines, or manage pull requests. Use for code analysis, CodeQL queries, and the alerts they produce only.

The LGTM API runs automated code analysis and CodeQL queries across your projects and returns the security alerts they surface. It lists and adds projects, requests analysis of a specific commit, runs code review on a patch, submits CodeQL query jobs over many projects at once, and reports the status of long-running operations.

Jentic One on Github View OpenAPI Document

Connect the LGTM API to your agent

Capabilities

Start building with LGTM API

Use Cases

Key Endpoints

Why Jentic?

Related APIs

FAQs

LGTM API