Skip to content

Mend API (3.0)

Mend's enhanced API enables automation of workflows in a REST compliant format. The API features:

  • Access for any user with Mend credentials, via a user key available in the user's profile page in the Mend Platform.
  • Improved security with a JWT token per organization, which expires every 30 minutes.
  • Added scalability with support for cursor pagination and limiting results size.
  • Broader functionality available programmatically.
  • New standard API documentation for easy navigation and search.

If you have a dedicated instance of Mend, contact your Mend representative to access this API on your instance.

Download OpenAPI description
Languages
Servers
Generated server url
https://baseUrl/

Access Management

Operations

Administration - Groups

Operations

Administration - Users

Operations

Administration - Labels

Operations

Reports

Operations

Scans

Operations

Projects

Operations

Applications

Operations

Findings - Project

Operations

Get application AI vulnerabilities

Request

Returns a list of AI vulnerabilities found in a specific application

Path
applicationUuidstringrequired

Application UUID

Query
cursorString

Parameter indicates the starting point for retrieving results, the first call doesn't include a cursor parameter in the request, the API response includes the first set of results along with a cursor pointing to the last item retrieved.

limitinteger

Specifies the maximum number of items to be returned in the response.

No request payload

Responses

Success

Bodyapplication/json
vulnerabilitiesArray of objects(v3.DTO_AIVulnerabilityListItem)
totalCountinteger
projectUuidstring
limitinteger
offsetinteger
Response
application/json
{ "vulnerabilities": [ {} ], "totalCount": 0, "projectUuid": "string", "limit": 0, "offset": 0 }

Get project implementation findings

Request

Returns implementation findings for a project

Path
projectUuidstringrequired

UUID of the project

Query
cursorString

Parameter indicates the starting point for retrieving results, the first call doesn't include a cursor parameter in the request, the API response includes the first set of results along with a cursor pointing to the last item retrieved.

limitinteger

Specifies the maximum number of items to be returned in the response.

groupedboolean

Group findings by element

No request payload

Responses

Success

Bodyapplication/json
responseArray of objects(v3.V3ImplementationFindingResponse)
supportTokenstring
additionalDataobject(v3.DTO_AdditionalData)
Response
application/json
{ "response": [ {} ], "supportToken": "string", "additionalData": { "paging": {}, "totalItems": 0 } }

Get implementation finding snippet

Request

Returns the code snippet and finding details for a specific implementation finding

Path
projectUuidstringrequired

UUID of the project

snippetUuidstringrequired

Snippet UUID

Query
cursorString

Parameter indicates the starting point for retrieving results, the first call doesn't include a cursor parameter in the request, the API response includes the first set of results along with a cursor pointing to the last item retrieved.

limitinteger

Specifies the maximum number of items to be returned in the response.

No request payload

Responses

Success

Bodyapplication/json
responseArray of objects(v3.V3ImplementationFindingResponse)
supportTokenstring
additionalDataobject(v3.DTO_AdditionalData)
Response
application/json
{ "response": [ {} ], "supportToken": "string", "additionalData": { "paging": {}, "totalItems": 0 } }

Findings - Scan

Operations

SAST

Operations

Settings - Organization

Operations

Integrations

Operations

AI

Operations

Red Team

Operations