Skip to content

Installation Manual

This document guides you through the complete local installation and execution of the API Threat Assessment Tool (AT-AT).


  • Node.js ≥ 18
  • Python ≥ 3.10
  • npm ≥ 9
  • Git
  • Recommended: PowerShell (Windows) or bash (Linux/macOS)

Terminal window
git clone https://github.com/YourOrg/API-Threat-Assessment-Tool.git
cd API-Threat-Assessment-Tool

Each of the three components — frontend, api, and backend — require .env files. Below are their templates:

SUPABASE_URL=https://your-project.supabase.co
SUPABASE_KEY=your-supabase-service-key
JWT_SECRET=your-secret
FRONTEND_URL=http://localhost:3000
PORT=3000
HOST=0.0.0.0
DANGEROUSLY_DISABLE_HOST_CHECK=true

SUPABASE_URL=https://our-link.supabase.co
SUPABASE_KEY=your-supabase-service-key
JWT_SECRET=your-secret
FRONTEND_URL=http://localhost:3000
PORT=3001

PORT=3002
FRONTEND_URL=http://localhost:3000
SUPABASE_URL=https://our-link.supabase.co
SUPABASE_KEY=your-supabase-service-key
JWT_SECRET=your-secret
FRONTEND_URL=http://localhost:3000

Terminal window
cd backend
python -m venv venv
.\venv\Scripts\Activate # Windows
# or: source venv/bin/activate # macOS/Linux
pip install -r requirements.txt
python main.py

Terminal window
cd api
npm install
node index.js

Terminal window
cd frontend
npm install
npm run start:client

If the start:client script fails with a host error, ensure your .env includes:

HOST=0.0.0.0
DANGEROUSLY_DISABLE_HOST_CHECK=true

Open:

http://localhost:3000

You should see the AT-AT UI.

  • Upload a spec to test backend connectivity
  • Verify localhost:3001 and localhost:5001 are active

IssueFix
allowedHosts errorAdd HOST=0.0.0.0 and DANGEROUSLY_DISABLE_HOST_CHECK=true
Supabase not loadingEnsure all .env files have correct SUPABASE_URL and SUPABASE_KEY
Python crash on dotenvRun pip install python-dotenv

  • GitHub Actions CI/CD is available and runs tests on pull requests.
  • This setup is for local development as used in Demo 3.