Skip to content

Mend API (3.0)

Mend's enhanced API enables automation of workflows in a REST compliant format. The API features:

  • Access for any user with Mend credentials, via a user key available in the user's profile page in the Mend Platform.
  • Improved security with a JWT token per organization, which expires every 30 minutes.
  • Added scalability with support for cursor pagination and limiting results size.
  • Broader functionality available programmatically.
  • New standard API documentation for easy navigation and search.

If you have a dedicated instance of Mend, contact your Mend representative to access this API on your instance.

Download OpenAPI description
Languages
Servers
Generated server url
https://baseUrl/

Access Management

Operations

Administration - Groups

Operations

Administration - Users

Operations

Administration - Labels

Operations

Reports

Operations

Scans

Operations

Get Scan Tags

Request

Security
bearer-key
Path
orgUuidstringrequired

org UUID (from the Mend App: Administration General > Organization UUID).

projectUuidstringrequired

UUID of the project

scanUuidstringrequired

Scan UUID

No request payload

Responses

OK

Bodyapplication/json
additionalDataobject(Provides insights into endpoint-supported pagination information.)
  • totalItems: The total count of data points returned in an API response.
Example: {"totalItems":"422","next":"http://someUrl?cursor=3","cursor":3}
supportTokenstring(Support Token)
Example: "1171c60d"
responseArray of objects(ScanTagDTO)
Response
application/json
{ "additionalData": { "totalItems": "422", "next": "http://someUrl?cursor=3", "cursor": 3 }, "supportToken": "1171c60d", "response": [ {} ] }

Get Scan Summary

Request

Security
bearer-key
Path
orgUuidstringrequired

org UUID (from the Mend App: Administration General > Organization UUID).

projectUuidstringrequired

UUID of the project

scanUuidstringrequired

Scan UUID

No request payload

Responses

OK

Bodyapplication/json
supportTokenstring(Support Token)
Example: "1171c60d"
responseobject(ScanSummaryDTOV3)
Response
application/json
{ "supportToken": "1171c60d", "response": { "uuid": "string", "name": "string", "processUuid": "string", "scanTime": "2019-08-24T14:15:22Z", "scanStatus": "string", "engine": "UNIFIED", "scanDuration": "string", "projectName": "string", "projectUuid": "string", "tags": [], "applicationName": "string", "applicationUuid": "string", "reference": "string", "statistics": {} } }

Get Scan

Request

Security
bearer-key
Path
orgUuidstringrequired

org UUID (from the Mend App: Administration General > Organization UUID).

projectUuidstringrequired

UUID of the project

scanUuidstringrequired

Scan UUID

No request payload

Responses

OK

Bodyapplication/json
supportTokenstring(Support Token)
Example: "1171c60d"
responseobject(ScanDTOV3)
Response
application/json
{ "supportToken": "1171c60d", "response": { "uuid": "string", "name": "string", "engine": "UNIFIED", "status": "RUNNING", "projectId": 0, "productId": 0, "domainId": 0, "projectUuid": "string", "processUuid": "string", "hasViolations": true, "startTime": "2019-08-24T14:15:22Z", "endTime": "2019-08-24T14:15:22Z", "lastModified": "2019-08-24T14:15:22Z", "configurationName": "string", "reference": "string" } }

Get Project Scans

Request

Returns the project related scans

Security
bearer-key
Path
orgUuidstringrequired

org UUID (from the Mend App: Administration General > Organization UUID).

projectUuidstringrequired

UUID of the project

Query
cursorString

Parameter indicates the starting point for retrieving results, the first call doesn't include a cursor parameter in the request, the API response includes the first set of results along with a cursor pointing to the last item retrieved.

limitstring<= 10000

Specifies the maximum number of items to be returned in the response.

Default "50"
searchstring

Filter your search to return items whose property has a specific value. Use the syntax: [property][operator][value]

  • Property: the name of the property of the item

  • Operator:

    • equals (==) - Returns true if the value exactly matches this one. If the value contains a * character, it behaves like a wildcard (similar to the LIKE operator). Example: entity==abc* — will return true for entities like "abcd" and "abc_123".
    • in (=in=) - Returns true if the value matches any item in the comma-separated list. Example: entity=in=value1,value2 — will return true for entities which are either value1, or value2.
    • between (=btw=) - Returns true if the value falls within the specified range. Example: entity=btw=10,20 — will return true for values between 10 and 20.
    • greaterThan (=gt=) - Returns true if the value is greater than the specified parameter. Example: entity=gt=100 — will return true for values greater than 100.
  • Value: the value of the property.

Logical operators AND (;) and OR (,) are supported in filters — param1=in=(val1,val2) and (param2==val3 or param3==val4), can also be written as — param1=in=(val1,val2);(param2==val3,param3==val4)

This endpoint supports filtering on the following properties and its supported operators:

  • engine: equals, in
  • scanStatus: equals, in
  • name: equals
  • tags: equals (use full values or the LIKE operator)
No request payload

Responses

OK

Bodyapplication/json
additionalDataobject(Provides insights into endpoint-supported pagination information.)
  • totalItems: The total count of data points returned in an API response.
Example: {"totalItems":"422","next":"http://someUrl?cursor=3","cursor":3}
supportTokenstring(Support Token)
Example: "1171c60d"
responseArray of objects(ScanSummaryDTOV3)
Response
application/json
{ "additionalData": { "totalItems": "422", "next": "http://someUrl?cursor=3", "cursor": 3 }, "supportToken": "1171c60d", "response": [ {} ] }

Projects

Operations

Applications

Operations

Findings - Project

Operations

Findings - Scan

Operations

SAST

Operations

Settings - Organization

Operations

Integrations

Operations

AI

Operations

Red Team

Operations