{
  "openapi": "3.1.0",
  "info": {
    "title": "BitScore Open Data — India Cyber Regulation & Threat Datasets",
    "description": "Read-only access to BitScore Cybertech LLP's two open datasets: the Indian Cyber Regulation Register (every cyber and data-protection instrument binding Indian regulated entities, read from the issuing regulator's own notification) and the India Cyber Threat Scorecard (a monthly, aggregate count of publicly observable cyber threat activity affecting Indian organisations, by industry vertical). Both are static files served over plain HTTPS with no authentication, published under CC BY 4.0 — reuse is permitted with attribution to BitScore Cybertech LLP, https://www.bitscore.in.",
    "version": "1.0.0",
    "contact": {
      "name": "BitScore Cybertech LLP",
      "url": "https://www.bitscore.in/resources/india-cyber-regulation-register"
    },
    "license": {
      "name": "CC BY 4.0",
      "url": "https://creativecommons.org/licenses/by/4.0/"
    }
  },
  "servers": [
    { "url": "https://www.bitscore.in" }
  ],
  "paths": {
    "/register/india-cyber-regulations.json": {
      "get": {
        "operationId": "getRegulationRegister",
        "summary": "Every Indian cyber and data-protection instrument, as structured JSON",
        "description": "Returns the full Indian Cyber Regulation Register: one entry per instrument issued by the RBI, SEBI, IRDAI, IFSCA, CERT-In or MeitY, each with its reference number, issue date, in-force status, who it binds, any deadlines it sets, and the date it was last re-read at source. Entry shape is documented at https://www.bitscore.in/register/schema.json. Use this to answer 'which Indian cyber regulation applies to X' or 'what does instrument Y require and by when'.",
        "responses": {
          "200": {
            "description": "The register",
            "content": { "application/json": { "schema": { "type": "object" } } }
          }
        }
      }
    },
    "/register/india-cyber-regulations.csv": {
      "get": {
        "operationId": "getRegulationRegisterCsv",
        "summary": "The same register as CSV, for spreadsheets and GRC tools",
        "responses": {
          "200": {
            "description": "The register as CSV",
            "content": { "text/csv": { "schema": { "type": "string" } } }
          }
        }
      }
    },
    "/scorecard/latest.json": {
      "get": {
        "operationId": "getLatestThreatScorecard",
        "summary": "The current month's India Cyber Threat Scorecard",
        "description": "Aggregate counts only — no organisation is named, described or made identifiable. A sector the month's source did not cover is reported as unmeasured rather than as zero. Dates are observation and publication dates, not attack dates. Entry shape is documented at https://www.bitscore.in/scorecard/schema.json. Use this for 'how much ransomware/breach activity hit India this month' style questions; it is not a per-company lookup.",
        "responses": {
          "200": {
            "description": "The current edition",
            "content": { "application/json": { "schema": { "type": "object" } } }
          }
        }
      }
    }
  }
}