Skip to content
Platform API 3.0
/
/
Get Project vulnerabiliti...

Mend API (3.0)

Mend's enhanced API enables automation of workflows in a REST compliant format. The API features:

  • Access for any user with Mend credentials, via a user key available in the user's profile page in the Mend Platform.
  • Improved security with a JWT token per organization, which expires every 30 minutes.
  • Added scalability with support for cursor pagination and limiting results size.
  • Broader functionality available programmatically.
  • New standard API documentation for easy navigation and search.

If you have a dedicated instance of Mend, contact your Mend representative to access this API on your instance.

Note: To help you get started with the Mend API 3.0, we recommend reviewing our onboarding guide -> Getting Started with API 3.0. This resource covers initial setup, authentication instructions, and helpful tips to help you successfully begin working with the Mend API 3.0.

Download OpenAPI description
3.0.json
3.0.yaml
Languages
Servers
Generated server url
https://baseUrl

Access Management

Operations

Administration - Groups

Operations

Administration - Users

Operations

Administration - Labels

Operations

Reports

Operations

Scans

Operations

Projects

Operations

Get Organization Projects

Request

Returns a list of all projects accessible to the current user

Security
bearer-key
Path
orgUuidstringrequired

org UUID (from the Mend App: Administration General > Organization UUID).

Query
cursorString

Parameter indicates the starting point for retrieving results, the first call doesn't include a cursor parameter in the request, the API response includes the first set of results along with a cursor pointing to the last item retrieved.

limitstring<= 10000

Specifies the maximum number of items to be returned in the response.

Default "50"
populateApplicationsstring

Add populateApplications=false to receive a slimmer response containing only the project UUID and name.

Default "true"
No request payload

Responses

OK

Bodyapplication/json
additionalDataobject(Provides insights into endpoint-supported pagination information.)
  • totalItems: The total count of data points returned in an API response.
Example: {"totalItems":"422","next":"http://someUrl?cursor=3","cursor":3}
supportTokenstring(Support Token)
Example: "1171c60d"
responseArray of objects(ProjectDTOV3)
Response
application/json
{
  "additionalData": {
    "totalItems": "422",
    "next": "http://someUrl?cursor=3",
    "cursor": 3
  },
  "supportToken": "1171c60d",
  "response": [
    { … }
  ]
}

Get Project Statistics

Request

Returns the requested statistics for the given projects that match at least one of the given identifiers.

Security
bearer-key
Path
orgUuidstringrequired

org UUID (from the Mend App: Administration General > Organization UUID).

Query
cursorString

Parameter indicates the starting point for retrieving results, the first call doesn't include a cursor parameter in the request, the API response includes the first set of results along with a cursor pointing to the last item retrieved.

limitstring<= 10000

Specifies the maximum number of items to be returned in the response.

Default "50"
Bodyapplication/jsonrequired
applicationUuidsArray of strings(Application UUIDs)
Example: ["123e4567-e89b-12d3-a456-426655440000"]
projectUuidsArray of strings(Project UUIDs)
Example: ["123e4567-e89b-12d3-a456-426655440000"]
application/json
{
  "applicationUuids": [
    "123e4567-e89b-12d3-a456-426655440000"
  ],
  "projectUuids": [
    "123e4567-e89b-12d3-a456-426655440000"
  ]
}

Responses

OK

Bodyapplication/json
additionalDataobject(Provides insights into endpoint-supported pagination information.)
  • totalItems: The total count of data points returned in an API response.
Example: {"totalItems":"422","next":"http://someUrl?cursor=3","cursor":3}
supportTokenstring(Support Token)
Example: "1171c60d"
responseArray of objects(ProjectSummaryDTOV3)
Response
application/json
{
  "additionalData": {
    "totalItems": "422",
    "next": "http://someUrl?cursor=3",
    "cursor": 3
  },
  "supportToken": "1171c60d",
  "response": [
    { … }
  ]
}

Get Project totals grouped by date

Request

Returns the requested statistics for the given projects that match at least one of the given identifiers.

Security
bearer-key
Path
orgUuidstringrequired

org UUID (from the Mend App: Administration General > Organization UUID).

Query
fromDatestringrequired

Enter the start date for the search. The date format is yyyy-MM-dd

toDatestringrequired

Enter the end date for the search. The date format is yyyy-MM-dd

No request payload

Responses

OK

Bodyapplication/json
supportTokenstring(Support Token)
Example: "1171c60d"
responseArray of objects(ProjectTotalsGroupedByDateDTO)
Response
application/json
{
  "supportToken": "1171c60d",
  "response": [
    { … }
  ]
}

Get Project totals

Request

Returns the requested statistics for the given projects that match at least one of the given identifiers.

Security
bearer-key
Path
orgUuidstringrequired

org UUID (from the Mend App: Administration General > Organization UUID).

Query
fromDatestringrequired

Enter the start date for the search. The date format is yyyy-MM-dd

toDatestringrequired

Enter the end date for the search. The date format is yyyy-MM-dd

No request payload

Responses

OK

Bodyapplication/json
supportTokenstring(Support Token)
Example: "1171c60d"
responseobject(PeriodTotalsDTO)
Response
application/json
{
  "supportToken": "1171c60d",
  "response": {
    "currentCount": 0,
    "totalInCurrPeriod": 0,
    "totalInPrevPeriod": 0
  }
}

Get Project Labels

Request

Get project labels. A label can be a string or namespace:value pair that provide additional metadata to assist with project management.

Security
bearer-key
Path
orgUuidstringrequired

org UUID (from the Mend App: Administration General > Organization UUID).

projectUuidstringrequired

UUID of the project

No request payload

Responses

OK

Bodyapplication/json
supportTokenstring(Support Token)
Example: "1171c60d"
responseArray of objects(EntityLabelDTO)
Response
application/json
{
  "supportToken": "1171c60d",
  "response": [
    { … }
  ]
}

Add Project Label

Request

Adds a new label to a project. A label can be a string or namespace:value pair that provide additional metadata to assist with project management.

Security
bearer-key
Path
orgUuidstringrequired

org UUID (from the Mend App: Administration General > Organization UUID).

projectUuidstringrequired

UUID of the project

Bodyapplication/jsonrequired
namespacestring(Label Namespace)required
Example: "Label Namespace A"
valuestring(Label Value)required
Example: "Label Value A"
application/json
{
  "namespace": "Label Namespace A",
  "value": "Label Value A"
}

Responses

OK

Bodyapplication/json
supportTokenstring(Support Token)
Example: "1171c60d"
responseobject(MessageDTO)
Response
application/json
{
  "supportToken": "1171c60d",
  "response": {
    "message": "Success!"
  }
}

Remove Project Label

Request

Removes a label from a project

Security
bearer-key
Path
orgUuidstringrequired

org UUID (from the Mend App: Administration General > Organization UUID).

projectUuidstringrequired

UUID of the project

labelUuidstringrequired

Label UUID (Administration > Labels)

No request payload

Responses

OK

Bodyapplication/json
supportTokenstring(Support Token)
Example: "1171c60d"
responseobject(MessageDTO)
Response
application/json
{
  "supportToken": "1171c60d",
  "response": {
    "message": "Success!"
  }
}

Get Project Violating Findings

Request

Returns the violations relates to project

Security
bearer-key
Path
orgUuidstringrequired

org UUID (from the Mend App: Administration General > Organization UUID).

projectUuidstringrequired

UUID of the project

Query
cursorString

Parameter indicates the starting point for retrieving results, the first call doesn't include a cursor parameter in the request, the API response includes the first set of results along with a cursor pointing to the last item retrieved.

limitstring<= 10000

Specifies the maximum number of items to be returned in the response.

Default "50"
No request payload

Responses

OK

Bodyapplication/json
additionalDataobject(Provides insights into endpoint-supported pagination information.)
  • totalItems: The total count of data points returned in an API response.
Example: {"totalItems":"422","next":"http://someUrl?cursor=3","cursor":3}
supportTokenstring(Support Token)
Example: "1171c60d"
responseArray of objects(ProjectViolationDTOV3)
Response
application/json
{
  "additionalData": {
    "totalItems": "422",
    "next": "http://someUrl?cursor=3",
    "cursor": 3
  },
  "supportToken": "1171c60d",
  "response": [
    { … }
  ]
}

Update Multiple Violation SLA

Request

Updates the SLA of Multiple Project Violating Findings

Security
bearer-key
Path
orgUuidstringrequired

org UUID (from the Mend App: Administration General > Organization UUID).

projectUuidstringrequired

UUID of the project

Bodyapplication/jsonrequired
datestring(Date)yyyy-MM-dd
Example: "2024/12/31"
identifiersArray of objects(ProjectViolationIdentifierDTOV3)
application/json
{
  "date": "2024/12/31",
  "identifiers": [
    { … }
  ]
}

Responses

OK

Bodyapplication/json
supportTokenstring(Support Token)
Example: "1171c60d"
responseboolean
Response
application/json
{
  "supportToken": "1171c60d",
  "response": true
}

Get Project vulnerabilities traces (Dependencies - SCA)

Request

Returns the traces of a given project. Note that this feature requires that Mend Prioritize be enabled in your Mend account.

Security
bearer-key
Path
projectUuidstringrequired

UUID of the project

Query
limitstring<= 10000

Specifies the maximum number of items to be returned in the response.

Default "50"
cursorString

Parameter indicates the starting point for retrieving results, the first call doesn't include a cursor parameter in the request, the API response includes the first set of results along with a cursor pointing to the last item retrieved.

No request payload

Responses

OK

Bodyapplication/json
additionalDataobject(Provides insights into endpoint-supported pagination information.)
  • totalItems: The total count of data points returned in an API response.
Example: {"totalItems":"422","next":"http://someUrl?cursor=3","cursor":3}
supportTokenstring(Support Token)
Example: "1171c60d"
responseArray of objects(ProjectTraceDTOV3)
Response
application/json
{
  "additionalData": {
    "totalItems": "422",
    "next": "http://someUrl?cursor=3",
    "cursor": 3
  },
  "supportToken": "1171c60d",
  "response": [
    { … }
  ]
}

Update Project with SBOM (Dependencies - SCA)

Request

Upload a single SBOM file to update an existing project. The SBOM scan is queued for asynchronous processing. Supported formats: SPDX (JSON/XML), CycloneDX (JSON/XML).

Security
bearer-key
Path
projectUuidstringrequired

UUID of the project

Bodymultipart/form-data
sbomFilestring(binary)required

The SBOM file to upload (SPDX or CycloneDX). Only one file per request.

multipart/form-data
{
  "sbomFile": "string"
}

Responses

SBOM scan successfully queued for project update

Bodyapplication/json
supportTokenstring

Support token for tracking

Example: "1171c60d"
projectobject(ProjectDTOV3)

Project information

scanobject(SbomScanInfoDTO)

Scan information

linkobject(SbomScanLinksDTO)

Log Link

Response
application/json
{
  "supportToken": "1171c60d",
  "project": {
    "uuid": "123e4567-e89b-12d3-a456-426655440000",
    "name": "My Project",
    "path": "My Application",
    "applicationName": "My Application",
    "applicationUuid": "123e4567-e89b-12d3-a456-426655440000"
  },
  "scan": {
    "scanUuid": "45e0c7f0-2a64-4a1c-bb2b-22e1c4f02126",
    "createdAt": "2025-10-27T18:50:05Z"
  },
  "link": {
    "logs": "/api/v3.0/projects/{projectUuid}/scans/{scanUuid}/dependencies/SBOM/logs"
  }
}

Applications

Operations

Findings - Project

Operations

Findings - Scan

Operations

Integrations

Operations

Dependencies Source Files

Operations

AI

Operations

Red Team

Operations