The request asks for a Container Analysis API; none of the candidates names such a product, so the closest fits are container image analysis and scanning tools. Anchore scans and analyzes container images and SBOMs through its API 212, Chainguard analyzes Dockerfiles 414, and Rad exposes container image SBOM and vulnerability listing 7. Which container platform or registry you use would narrow the choice.
A question back: Which container platform or registry do you use (for example Docker, Kubernetes, or a cloud registry), so I can narrow the choice?
- 1
Anchore Engine APIanchore.ioverified and signed
Anchore's API submits container images for analysis by its engine and imports analyzed images 12.
official:API · Anchore Engine API Server
for agents: archive_image_analysis · import_image_dockerfile · add_image
- 2
Chainguardchainguard.devfound in code, not yet checked
Chainguard's dfc MCP server analyzes a Dockerfile and reports its structure 14.
+2 community tools built for it
for agents: analyze_dockerfile · convert_dockerfile · healthcheck
- 3
RAD Securityrad.securityfound in code, not yet checked
RAD Security exposes actions to list vulnerabilities in a container image and to get a container image's SBOM.
for agents: get_container_llm_analysis · get_image_sbom · list_image_vulnerabilities
- 4
Aquasecaquasec.comverified and signed
Aquasec's trivy-action scans container images for vulnerabilities with Trivy 19.
for agents: aquasecurity/trivy-action · aquasecurity/tracee-action
Sources
- 2SBOM-Powered Software Composition Analysis • Anchoreanchore.com · read 2026-10-29
- 4The trusted source for open source | Chainguardchainguard.dev · read 2026-10-29
- 7Stop Managing Alerts. Start Running Security. | RAD Securityradsecurity.ai · read 2026-10-30
- 9Aqua Container Runtime and AI Securityaquasec.com · read 2026-10-30
- 12Anchore Engine API Server: declares "archive_image_analysis" (the record we read and signed)unfragile.ai · read 2026-10-24
- 14dfc: declares "analyze_dockerfile" (the record we read)github.com · read 2026-10-24
- 19Aqua Security Trivy: declares "aquasecurity/trivy-action" (the record we read and signed)unfragile.ai · read 2026-10-24
For agents: the 10 actions behind this answer
prepareContainerImage · Cloudflare API verified and signed
Prepare a container image
archive_image_analysis · Anchore Engine API Server verified and signed
registry_get · DigitalOcean API verified and signed
Get Container Registry Information
analyze_dockerfile · dfc found in code, not yet checked
Analyze a Dockerfile and provide information about its structure
docker-sandboxes-network-credentials · docker-sandboxes-network-credentials verified and signed
Use this skill when configuring what a Docker Sandboxes (`sbx`) sandbox can reach on the network or which credentials it authenticates with, even if the user just says they want to "let the agent call an internal API", "block all network access", "give the agent a GitHub token", or "use a private re
custom_api_call · GitHub (Activepieces) verified and signed
Custom API Call — Make a custom API call to a specific endpoint
get_container_llm_analysis · RAD Security found in code, not yet checked
Get LLM analysis of a container's process tree
readApiregistrationV1APIService · Kubernetes verified and signed
read the specified APIService
aquasecurity/trivy-action · Aqua Security Trivy verified and signed
Scans container images for vulnerabilities with Trivy
createImageVariation · OpenAI API verified and signed
Creates a variation of a given image.
Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.