MSSP: New License Packaging for Evaluation Accounts

Tenable has added support for the new Tenable One license packaging to the Tenable Managed Security Service Provider (MSSP) API. Partners can now provision evaluation accounts on the Tenable One Foundation and Tenable One Advanced tiers, as well as on standalone Tenable Vulnerability Management. The licensed_apps request body property on the Create evaluation account v2 endpoint now accepts a base tier and its available add-ons, and the legacy application codes it previously accepted are deprecated.

Existing evaluation accounts are not affected. Accounts provisioned under the legacy packaging retain that packaging, and the new packaging applies only to accounts created after this change.

🛑
Caution
Legacy license packaging is deprecated, and Tenable plans to end support for it after March 1, 2027. Until then, a licensed_apps array containing any combination of the legacy codes ad, asm, cnapp, cns, lumin, one, pci, vm, and was continues to be accepted. Update any existing integrations to specify a base tier and its supported add-ons before this date to avoid disruption.

Migrating to the New License Packaging

Specify exactly one base tier in licensed_apps, along with any add-ons available for that tier:

Base tier	Code	Available add-ons
Tenable Vulnerability Management	`vm`	`asm` (Tenable Attack Surface Management)
Tenable One Foundation	`foundation`	`ad` (Tenable Identity Exposure), `ai` (AI Exposure), `cnapp` (Full CNAPP)
Tenable One Advanced	`advanced`	`ad` (Tenable Identity Exposure), `ai` (AI Exposure), `cnapp` (Full CNAPP)

Specifying more than one base tier, or specifying an add-on that is not available for the selected base tier, returns a 400 response. Add-ons are optional, so ["advanced"] is a complete request body value, and multiple add-ons are permitted for a single tier.

For example, to create an evaluation account on the Tenable One Advanced tier with the Full CNAPP add-on, you could use the following cURL request:

curl --request POST \
     --url https://cloud.tenable.com/mssp/accounts/v2/eval \
     --header 'X-ApiKeys: accessKey=<YOURKEY>;secretKey=<YOURKEY>' \
     --header 'accept: application/json' \
     --header 'content-type: application/json' \
     --data '
{
  "customer_name": "Example, Inc.",
  "licensed_apps": [
    "advanced",
    "cnapp"
  ],
  "email": "[email protected]",
  "default_contact_email": "[email protected]",
  "country": "US"
}
'

Affected Endpoint

The following endpoint has been updated:

Endpoint	Name	Update
POST /mssp/accounts/v2/eval	Create evaluation account v2	The `licensed_apps` request body property accepts a base tier and its add-ons for the new license packaging.