Jump to Content
Tenable Developer PortalDocumentationAPI ExplorerRecipesCommunityChangelogRSSSubscribe
HomeDocumentationRecipesAPI ExplorerChangelog
DocumentationAPI ExplorerRecipesCommunityChangelogRSSSubscribeLog InTenable Developer Portal
API Explorer
Log In

Get Started

  • Navigate the APIs
  • Read the Docs
  • Disclaimer
  • Download the Specs
  • Try It!

Tenable Platform & Settings

  • Access Control (API)
    • List allowed IP addressesget
    • Update allowed IP addressesput
  • Access Control (Groups)
    • Create grouppost
    • List groupsget
    • Update groupput
    • Delete groupdelete
    • List users in groupget
    • Add user to grouppost
  • Access Control (Permissions)
    • Create permissionpost
    • List permissionsget
    • Get permission detailsget
    • Update permissionput
    • Delete permissiondelete
    • List user permissionsget
    • List user group permissionsget
    • Get current user permissionsget
  • Access Control (Users)
    • Create userpost
    • List usersget
    • Get user detailsget
    • Update userput
    • Delete userdelete
    • Get user roleget
    • Delete user from groupdelete
    • Change user roleput
    • Change passwordput
    • Enable user accountput
    • Get user authorizationsget
    • Update user authorizationsput
    • Generate API keysput
    • Impersonate userpost
    • Send verification codepost
    • Validate verification codepost
    • Configure two-factor authenticationput
  • Access Groups v1
    • Create access grouppost
    • List access groupsget
    • Update access groupput
    • Delete access groupdelete
    • Get access group detailsget
    • List access group filtersget
    • List asset rule filtersget
  • Access Groups v2
    • Create access grouppost
    • List access groupsget
    • Update access groupput
    • Delete access groupdelete
    • Get access group detailsget
    • List access group filtersget
    • List asset rule filtersget
  • Activity Log
    • View activity logget
  • Agents
    • List agentsget
    • List agents by groupget
    • Get agent detailsget
    • Rename agentpatch
    • Unlink agentdelete
  • Agent Bulk Operations
    • Add agents to a grouppost
    • Add agents to a networkpost
    • Agent profile operationspost
    • Check agent group operation statusget
    • Check agent operation statusget
    • Send instructions to agentspost
    • Send instructions to agents grouppost
    • Remove agents from grouppost
    • Remove agents from networkpost
    • Unlink agentspost
  • Agent Config
    • Get agent configurationget
    • Update agent configurationput
  • Agent Exclusions
    • Create agent exclusionpost
    • List agent exclusionsget
    • Get agent exclusion detailsget
    • Update agent exclusionput
    • Delete agent exclusiondelete
  • Agent Groups
    • Create agent grouppost
    • List agent groupsget
    • Get agent group detailsget
    • Update agent group nameput
    • Delete agent groupdelete
    • Add agent to groupput
    • Remove agent from groupdelete
  • Agent Profiles
    • Create profilepost
    • List profilesget
    • Get profile detailsget
    • Update profileput
    • Delete profiledelete
    • Clone profilepost
  • Cloud Connectors
    • Create connectorpost
    • List connectorsget
    • Get connector detailsget
    • Update connectorput
    • Delete connectordelete
    • Download ARM Templateget
    • Download CFT Templatepost
    • List AWS cloudtrailspost
    • Import datapost
  • Credentials
    • Create managed credentialpost
    • List managed credentialsget
    • Get managed credential detailsget
    • Update managed credentialput
    • Delete managed credentialdelete
    • List credential typesget
    • Upload credentials filepost
  • Exclusions
    • Create exclusionpost
    • List exclusionsget
    • Import exclusionpost
    • Get exclusion detailsget
    • Update exclusionput
    • Delete exclusiondelete
  • Networks
    • Create networkpost
    • List networksget
    • Get network detailsget
    • Update networkput
    • Delete networkdelete
    • Get network asset countget
    • Assign scannerspost
    • List network scannersget
    • Bulk assign scannerspost
    • List assignable scannersget
  • OT Connectors
    • Create OT connectorpost
    • List OT connectorsget
    • Get OT connector detailsget
    • Update OT connectorput
    • Delete OT connectordelete
    • Generate linking keypost
  • Permissions
    • Get object permissionsget
    • Update object permissionsput
  • Scanners
    • List scannersget
    • Get scanner detailsget
    • Update scannerput
    • Delete scannerdelete
    • Get scanner keyget
    • List AWS scan targetsget
    • List running scansget
    • Send instructions to scannerpost
    • Send instructions to multiple scannerspost
    • Allow control of running scanspost
    • Toggle scanner link stateput
  • Scanner Groups
    • Create scanner grouppost
    • List scanner groupsget
    • List scanner group detailsget
    • Update scanner groupput
    • Delete a scanner groupdelete
    • List scanners within scanner groupget
    • Add scanner to scanner grouppost
    • Remove scanner from scanner groupdelete
    • List scan routesget
    • Update scan routesput
  • Server
    • Get server statusget
    • List server propertiesget
  • Tags
    • Create tag categorypost
    • List tag categoriesget
    • Get category detailsget
    • Update tag categoryput
    • Delete tag categorydelete
    • Create tag valuepost
    • List tag valuesget
    • Get tag value detailsget
    • Update tag valueput
    • Delete tag valuedelete
    • List tags for an assetget
    • Add or remove asset tagspost
    • Bulk delete tag valuespost
    • List asset tag filtersget
  • Target Groups
    • Create target grouppost
    • List target groupsget
    • Get target group detailsget
    • Update target groupput
    • Delete target groupdelete

Vulnerability Management

  • Assets
    • List assetsget
    • Get asset detailsget
    • Update ACRpost
    • Move assetspost
    • Bulk delete assetspost
    • Import assetspost
    • List asset import jobsget
    • Get import job statusget
  • Asset Attributes
    • Create attributepost
    • List attributesget
    • Update attributeput
    • Delete attributedelete
    • Assign attributes to assetput
    • List attributes assigned to assetget
    • Delete attributes from assetdelete
    • Assign single attribute to assetput
    • Delete attribute from assetdelete
  • Editor
    • Get configuration detailsget
    • List templatesget
    • Get template detailsget
    • Get plugin detailsget
    • Download audit fileget
  • Exports (Assets)
    • Export assets v1post
    • Export assets v2post
    • Get assets export statusget
    • List asset export jobsget
    • Download assets chunkget
    • Cancel asset exportpost
  • Exports (Compliance Data)
    • Export compliance datapost
    • Get compliance export statusget
    • List compliance export jobsget
    • Download compliance chunkget
    • Cancel compliance exportpost
  • Exports (Vulnerabilities)
    • Export vulnerabilitiespost
    • Get vulnerability export statusget
    • List vuln export jobsget
    • Download vulnerabilities chunkget
    • Cancel vuln exportpost
  • File
    • Upload filepost
  • Filters
    • List agent filtersget
    • List asset filtersget
    • List asset filters v2post
    • List credential filtersget
    • List report filtersget
    • List scan filtersget
    • List scan history filtersget
    • List vulnerability filtersget
    • List vulnerability filters v2post
  • Folders
    • Create folderpost
    • List foldersget
    • Rename folderput
    • Delete folderdelete
  • Plugins
    • List pluginsget
    • Get plugin detailsget
    • List plugin familiesget
    • List plugins in family (ID)get
    • List plugins in family (name)post
  • Policies
    • Create policypost
    • List policiesget
    • Copy policypost
    • Import policypost
    • Export policyget
    • List policy detailsget
    • Update policyput
    • Delete policydelete
  • Reports
    • Create reportpost
    • Get report statusget
    • Download reportget
  • Scans
    • Create scanpost
    • List scansget
    • Get scan detailsget
    • Update scanput
    • Delete scandelete
  • Scan Control
    • Launch scanpost
    • Pause scanpost
    • Resume scanpost
    • Stop scanpost
    • Force stop scanpost
  • Scan Exports
    • Export scanpost
    • Check scan export statusget
    • Download exported scanget
  • Scan History
    • Get scan historyget
    • Get scan history detailsget
    • Delete scan historydelete
  • Scan Results
    • Get host detailsget
    • Get plugin outputget
    • Get scan attachment fileget
  • Scan Status
    • Get latest scan statusget
    • Update scan statusput
    • Get scan progressget
  • Scan Tasks
    • Enable scheduleput
    • Copy scanpost
    • Convert credentialspost
    • Import uploaded scanpost
    • Get scan countget
    • Get timezonesget
    • Test scan routespost
  • Shared Collections
    • Create shared collectionpost
    • List shared collectionsget
    • Get shared collection detailsget
    • Update shared collectionput
    • Delete shared collectiondelete
    • Get shared collection details by namepost
    • Get job statusget
    • Add scan configs to shared collectionpost
    • List scan configs in shared collectionget
    • Remove scan configs from shared collectiondelete
  • Remediation Scans
    • Create remediation scanpost
    • List remediation scansget
  • Vulnerabilities
    • Import vulnerabilities v1post
    • Import vulnerabilities v2post
  • Workbenches
    • List vulnerabilitiesget
    • Get plugin detailsget
    • List plugin outputsget
    • List assetsget
    • List assets with vulnerabilitiesget
    • Get asset informationget
    • Get asset activity logget
    • List asset vulnerabilitiesget
    • Get asset vulnerability detailsget
    • List asset vulnerabilities for pluginget
    • Delete assetdelete
    • Export workbenchget
    • Check export statusget
    • Download export fileget

Web App Scanning

  • Attachments
    • Download attachmentget
  • Configurations
    • Create scan configurationpost
    • Get remediation scan configurationget
    • Search scan configurationspost
    • Get scan configuration detailsget
    • Upsert scan configurationput
    • Move scan configurationpatch
    • Delete scan configurationdelete
    • Get scan configuration processing statusget
    • Export scan configuration for CI/CDget
  • Exports
    • Export findingspost
    • Get findings export statusget
    • List findings export jobsget
    • Download findings export chunkget
    • Cancel findings exportpost
  • Filters
    • List scan configuration filtersget
    • List scan filtersget
    • List user-defined template filtersget
    • List vulnerability filtersget
    • List vulnerability filters for scanget
  • Folders
    • Create folderpost
    • List foldersget
    • Rename folderput
    • Delete folderdelete
  • Plugins
    • List pluginsget
    • Get plugin detailsget
  • Scans
    • Launch scanpost
    • Import scanpost
    • Search scanspost
    • Get scan detailsget
    • Update scan statuspatch
    • Delete scandelete
    • Get scan notesget
    • Search vulnerabilities for scanpost
    • Export scan resultsput
    • Download exported scanget
    • Download debug ZIP fileget
  • Templates
    • List Tenable-provided templatesget
    • Get Tenable-provided template detailsget
    • Search user-defined templatespost
    • Get user-defined template detailsget
    • Update user-defined templateput
    • Delete user-defined templatedelete
  • Vulnerabilities
    • Get vulnerability detailsget
    • Search vulnerabilitiespost

PCI ASV

  • Attestations
    • List attestationsget
    • Get attestation detailsget
    • List attestation disputesget
    • List undisputed failuresget
    • List attestation assetsget
  • Scans
    • List PCI scansget

MSSP

  • Accounts
    • Create evaluation account v1post
    • Create evaluation account v2post
    • Create quotepost
    • List child accountsget
    • Get child account detailsget
    • List domainsget
  • Account Groups
    • Create account grouppost
    • List account groupsget
    • Get account group detailsget
    • Update account groupput
    • Delete account groupdelete
  • Child Containers
    • Generate auth keys for child containerpost
    • List child containersget
    • Get child container historyget
  • Dashboards
    • Get widget detailsget
  • Domains
    • Add domainpost
    • List domainsget
    • Get domain detailsget
    • Update domainput
    • Send activation codepost
  • Filters
    • List account filtersget
  • License
    • Get license detailsget
  • Logos
    • Add logopost
    • List logosget
    • Get logo detailsget
    • Update logopatch
    • Delete logodelete
    • Assign logoput
    • Download logo (PNG)get
    • Download logo (Base64)get
  • Partners
    • Get partner detailsget
  • Resource Links
    • Bulk add resource linkspost
    • Add resource linkspost
    • List resource linksget

Downloads API

  • Downloads
    • List product pagesget
    • List downloadable files for a productget
    • Download a fileget

Identity Exposure

  • About
    • Get about singleton.get
  • AD object
    • Return the last state of every ad-object at the provided timestampBy default, the timestamp is now. Objects out of scope are includedget
    • Get ad-object instance by id.get
    • Get ad-object instance by id.get
    • Retrieve an AD object by id that have deviances for a specific profile and checkerget
    • Get one ad-object by event and by idget
    • Get one ad-object changes between a given event and the event which precedes itget
    • Search all AD objects having deviances by profile by checkerpost
  • Alert
    • Get alert instance by id.get
    • Update alert instance.patch
    • Retrieve all alert instances.get
    • Update alerts for one profilepatch
  • API key
    • Get the API key of the current userget
    • Create or renew an API key for the current userpost
  • Application setting
    • Get the application settingsget
    • Update the application settingspatch
  • Attack
    • Get all attacksget
    • Get all attacks in CSV rows formatget
  • Attack type
    • Get attack typesget
  • Attack type configuration
    • Get the attack type configurationget
    • Update the attack type configurationpatch
  • Attack type option
    • Get all the attack type options related to a profile and attack type.get
    • Create attack type options related to a profile and attack type.post
  • Category
    • Retrieve all category instances.get
    • Get category instance by id.get
  • Checker
    • Retrieve all checker instances.get
    • Get checker instance by id.get
  • Checker option
    • Get all the checker options related to a profile and checker.get
    • Create checker options related to a profile and checker.post
  • Cloud statistics
    • Get user info needed to send cloud statistics.get
  • Dashboard
    • Retrieve all dashboard instances.get
    • Create dashboard instance.post
    • Get dashboard instance by id.get
    • Update dashboard instance.patch
    • Delete dashboard instance with it's associated widgetsdelete
  • Deviance
    • Get all deviances that has been created or resolved since an eventget
    • Get ad-object-deviance-history instance by id.get
    • Get all ad objects of a deviance in CSV rows formatget
    • Get all deviances for a directory.get
    • Get ad-object-deviance-history instance by id.get
    • Update ad-object-deviance-history instance.patch
    • Get all deviances related to a single directory and checker.get
    • Update instances matching a checkerId.patch
    • Get all deviances by checker.post
    • Update the deviances emitted on a specific AD object and for a specific checker.patch
    • Search all deviances by profile by checker by AD objectpost
    • Get all deviances by eventId.post
  • Directory
    • Retrieve all directory instances.get
    • Create directory instance.post
    • Get directory instance by id.get
    • Get all directories for a given infrastructureget
    • Get directory instance by id.get
    • Update directory instance.patch
    • Delete directory instance.delete
  • Email notifier
    • Retrieve all email-notifier instances.get
    • Create email-notifier instance.post
    • Get email-notifier instance by id.get
    • Update email-notifier instance.patch
    • Delete email-notifier instance.delete
    • Send a test email notification by idget
    • Send a test email notificationpost
  • Event
    • Get event instance by id.get
    • Get event instance by id.get
    • Search events instancespost
  • Infrastructure
    • Retrieve all infrastructure instances.get
    • Create infrastructure instance.post
    • Get infrastructure instance by id.get
    • Update infrastructure instance.patch
    • Delete infrastructure instance.delete
  • LDAP configuration
    • Get ldap-configuration singleton.get
    • Update ldap-configuration singleton.patch
  • License
    • Get license singleton.get
    • Create new license singletonpost
    • Get product association in the Licenseget
  • Lockout policy
    • Get the lockout policyget
    • Update the lockout policypatch
  • Metrics
    • Collect Eridanis and SQL Server health metrics.get
  • Preference
    • Get a user's preferencesget
    • Update a user's preferencespatch
  • Profile
    • Retrieve all profile instances.get
    • Create profile instance.post
    • Get profile instance by id.get
    • Update profile instance.patch
    • Delete profile instance.delete
    • Creates a new profile from another onepost
    • Unstages change of the related profilepost
    • Commits change of the related profilepost
  • Reason
    • Retrieve all reason instances.get
    • Get reason instance by id.get
    • Retrieve all reason instances that have deviances for a specific profile and checker.get
    • Retrieve all reason instances for which we have deviances for a specific profile, directory and event.get
  • Relay
    • Get current linking key for relay setupget
  • Report access token
    • Returns the authentication token required to pull data from Tenable Cloudget
    • Updates the authentication token required to pull data from Tenable Cloudpost
  • Role
    • Retrieve all role instances.get
    • Create role instance.post
    • Return the default roles for user creationget
    • Get role instance by id.get
    • Update role instance.patch
    • Delete role instance.delete
    • Creates a new role from another onepost
    • Replace permission list for a roleput
  • SAML configuration
    • Get saml-configuration singleton.get
    • Update saml-configuration singleton.patch
    • Generates SAML certificateget
  • Score
    • Get the directories score by profileget
  • Syslog
    • Retrieve all syslog instances.get
    • Create syslog instance.post
    • Get syslog instance by id.get
    • Update syslog instance.patch
    • Delete syslog instance.delete
    • Send a test syslog notification by idget
    • Send a test syslog notificationpost
  • Topology
    • Get a representation of the AD topology.get
  • User
    • Get all usersget
    • Create user instance.post
    • Get a user's informationget
    • Get user instance by id.get
    • Update user instance.patch
    • Delete user instance.delete
    • Update a user's passwordpatch
    • Logs in a userpost
    • Logs out a userpost
    • Replace role list for a userput
  • Widget
    • Get all widgets by dashboard idget
    • Create a new widget in dashboard by dashboard idpost
    • Get widget instance by id.get
    • Update widget instance.patch
    • Delete widget instance.delete
    • Get a widget's options by idget
    • Define widget's options by idput

Attack Surface Management

  • Tags
    • Get tags from storeget
    • Add a new tag to the storepost
    • Delete tag from storepost
    • Edit tag by idpost
    • Search tags by namepost
    • Add all assets to all tagspost
    • Remove all assets from all tagspost
    • Add all assets to all tags using a filterpost
    • Remove all assets from all tags using a filterpost
  • Sources
    • List of Sourcesget
    • Add source to inventorypost
    • Add an IP source to inventorypost
    • Add source to inventorypost
    • Add source to inventorypost
    • Add an Azure based source to the inventorypost
    • Add an ASN source to inventorypost
    • Add multiple IP sourcespost
    • Add multiple cloudflare sources from all the zones that the given API key has access to.post
    • Get the source by idpost
    • Delete the source by idpost
    • Add multiple sourcespost
    • Delete multiple sourcespost
  • Assets
    • List assetspost
    • Get asset detailsget
    • Get asset historyget
    • List archived asset resultspost
    • Get the severity breakdown for the specified assetget
  • Assets Bulk Operations
    • Move or copy specific assetspost
    • Move or copy filtered assetspost
    • Archive or unarchive assetspost
    • Archive or unarchive filtered assetspost
  • Alerts
    • Get subscription alertsget
  • Dashboard
    • Access aggregate datapost
  • Subscriptions
    • Get subscriptions from storeget
    • Get subscription from store by IDget
    • Get assets recently added to smartfolder specified by IDget
    • Get the subscription history by IDget
    • Add a new subscription to the storepost
    • Edit subscription by idpost
    • Remove a subscription from the storepost
  • Text Records
    • /txt-records/searchpost
  • Global
    • List asset properties.get
  • Logs
    • Get user action logs from store.post
  • Cloudflare Keys
    • Create Cloudflare keypost
    • List Cloudflare keysget
    • Update Cloudflare keypost
    • Delete Cloudflare keydelete
    • List zonesget
  • Aws Keys
    • Create AWS keypost
    • List AWS keysget
    • Update Azure keypost
    • Delete AWS keydelete
  • Azure Keys
    • Create Azure keypost
    • List Azure keysget
    • Update Azure keypost
    • Delete Azure keydelete
  • Export
    • Download exportpost
    • Export assets in XLSX formatpost
    • Export assets in CSV formatpost
    • Export assets in JSON formatpost
    • Export source list in CSV formatpost
    • Export source list in XLSX formatpost
  • Inventory
    • Get the asset limit of the current inventoryget
    • List the assets in your Inventorypost
    • Edit current inventory name and description.patch
    • Create a new inventorypost
    • Get user inventoriesget
    • Leave the given inventory.post
  • Suggestions
    • Get current inventory suggestions listpost
    • Count all suggestions of inventory with filters appliedpost
    • Accept suggestionspost
    • Decline suggestionspost

Download the Specs

Use the following links to download the OpenAPI specifications for Tenable REST services:

  • Tenable Platform & Settings
  • Vulnerability Management
  • Web App Scanning v2
  • Attack Path Analysis
  • PCI ASV
  • Managed Security Service Provider (MSSP) Portal
  • Identity Exposure
  • Attack Surface Management
  • Downloads API
  • Tenable.com
  • Community & Support
  • Documentation
  • Education
  • © Tenable®, Inc. All Rights Reserved
  • Privacy Policy
  • Legal
  • 508 Compliance