Mend API (2.0)
Mend's enhanced SCA API enables automation of workflows in a REST compliant format. The API features:
- Access for any user with Mend credentials, via a user key available in the user's profile page in the Mend App.
- Improved security with a JWT token per organization, which expires every 30 minutes.
- Added scalability with support for pagination, filtering and sorting search results.
- Broader functionality available programmatically.
- New standard API documentation for easy navigation and search.
If you have a dedicated instance of Mend, contact your Mend representative to access this API on your instance.
Filter your search to return items whose property has a specific value. Use the syntax: property:operation:value where a colon (:) separates between property, operation and value.
- Property: the name of the property of the item
- Operation:
- equals - true if the value is identical to this value.
- in - true if the value is identical to one of the items in this comma-separated list. E.g. in:value1,value2,value3
- like - true if the property's value is contained within this value
- regex - true if this regular expression resolves as true. The regex is not case sensitive, and special characters must be escaped with a backslash. Special characters include space, double quote ("), '<', '>', '#', '%', '{', '}', vertical bar ('|'), backslash, '^'. To pass an escaped character in a URL in Postman, encode it first. E.g. to return all items whose value begins with a or A, use regex:^a
- Value: the value of the property.
To combine multiple filters, separate each filter with a semicolon with no space. E.g. property1:operation1:value1;property2:operation2:value2
This endpoint supports filtering on the following properties and its supported operators:
- description:[like | equals | regex]:value
- directDependency:[like | equals | regex]:value
- hasNotice:[like | equals | regex]:value
- license:[like | equals | regex | in]:value
- locations:[like | equals | regex]:value
- name:[like | equals | regex]:value
- numberOfLicenses:[equals | gt]:value
- projectName:[like | equals | regex]:value
- type:[like | in | equals | regex]:value
Sort search results alphabetically on an item's property by entering sort= followed by the property name. E.g. enter sort=email to sort alphabetically by their email addresses from a-z ascending.To sort in descending order (z-a), add a minus sign ('-'). E.g. sort=-email.
You can sort by the following properties:
- description
- directDependency
- hasNotice
- license
- locations
- name
- numberOfLicenses
- projectName
- type
- Generated server url
https://api-saas.mend.io/api/v2.0/products/{productToken}/libraries/byProjects
- Payload
- cURL
- JS
- Go
- Ruby
- Java 8
{ "projectIdentifiers": [ "123e4567-e89b-12d3-a456-426655440000" ] }
{ "supportToken": "1171c60d", "retVal": [ { … } ] }
- Generated server url
https://api-saas.mend.io/api/v2.0/products/{productToken}/libraries/{libraryUuid}/vulnerabilities
- Payload
- cURL
- JS
- Go
- Ruby
- Java 8
No request payload
OK
- totalItems: The total count of data points returned in an API response.
- isLastPage: Defines whether the current page represents the conclusion of the API response. When “true”, this signifies you are viewing the last page of the API response. When “false”, this indicates there are further pages remaining.
{ "additionalData": { "totalItems": "422", "isLastPage": "true" }, "supportToken": "1171c60d", "retVal": [ { … } ] }
- Generated server url
https://api-saas.mend.io/api/v2.0/products/{productToken}/libraries/{libraryUuid}/projects
- Payload
- cURL
- JS
- Go
- Ruby
- Java 8
No request payload
{ "supportToken": "1171c60d", "retVal": [ { … } ] }
Filter your search to return items whose property has a specific value. Use the syntax: property:operation:value where a colon (:) separates between property, operation and value.
- Property: the name of the property of the item
- Operation:
- equals - true if the value is identical to this value.
- in - true if the value is identical to one of the items in this comma-separated list. E.g. in:value1,value2,value3
- like - true if the property's value is contained within this value
- regex - true if this regular expression resolves as true. The regex is not case sensitive, and special characters must be escaped with a backslash. Special characters include space, double quote ("), '<', '>', '#', '%', '{', '}', vertical bar ('|'), backslash, '^'. To pass an escaped character in a URL in Postman, encode it first. E.g. to return all items whose value begins with a or A, use regex:^a
- Value: the value of the property.
To combine multiple filters, separate each filter with a semicolon with no space. E.g. property1:operation1:value1;property2:operation2:value2
This endpoint supports filtering on the following properties and its supported operators:
- componentName:[like | equals | regex]:value
- copyrights:[like | regex]:value
- license:[equals | in]:value
- licenseRisk:[equals | in]:value
- licenseType:[equals | in]:value
- projectName:[like | equals | regex]:value
Sort search results alphabetically on an item's property by entering sort= followed by the property name. E.g. enter sort=email to sort alphabetically by their email addresses from a-z ascending.To sort in descending order (z-a), add a minus sign ('-'). E.g. sort=-email.
You can sort by the following properties:
- componentName
- license
- licenseType
- copyrights
- licenseRisk
- projectName
- Generated server url
https://api-saas.mend.io/api/v2.0/products/{productToken}/libraries/licenses
- Payload
- cURL
- JS
- Go
- Ruby
- Java 8
No request payload
OK
- totalItems: The total count of data points returned in an API response.
- isLastPage: Defines whether the current page represents the conclusion of the API response. When “true”, this signifies you are viewing the last page of the API response. When “false”, this indicates there are further pages remaining.
{ "additionalData": { "totalItems": "422", "isLastPage": "true" }, "supportToken": "1171c60d", "retVal": [ { … } ] }
Filter your search to return items whose property has a specific value. Use the syntax: property:operation:value where a colon (:) separates between property, operation and value.
- Property: the name of the property of the item
- Operation:
- equals - true if the value is identical to this value.
- like - true if the property's value is contained within this value
- regex - true if this regular expression resolves as true. The regex is not case sensitive, and special characters must be escaped with a backslash. Special characters include space, double quote ("), '<', '>', '#', '%', '{', '}', vertical bar ('|'), backslash, '^'. To pass an escaped character in a URL in Postman, encode it first. E.g. to return all items whose value begins with a or A, use regex:^a
- Value: the value of the property.
To combine multiple filters, separate each filter with a semicolon with no space. E.g. property1:operation1:value1;property2:operation2:value2
This endpoint supports filtering on this property:
- name:[like | equals | regex]:value
- type:[like | equals ]:value
- comment:[like | equals | regex]:value
- markType:[equals]:value
Sort search results alphabetically on an item's property by entering sort= followed by the property name. E.g. enter sort=email to sort alphabetically by their email addresses from a-z ascending.To sort in descending order (z-a), add a minus sign ('-'). E.g. sort=-email.
You can sort by the following properties:
- name
- type
- comment
- markType
- Generated server url
https://api-saas.mend.io/api/v2.0/products/{productToken}/libraries/inHouse
- Payload
- cURL
- JS
- Go
- Ruby
- Java 8
No request payload
OK
- totalItems: The total count of data points returned in an API response.
- isLastPage: Defines whether the current page represents the conclusion of the API response. When “true”, this signifies you are viewing the last page of the API response. When “false”, this indicates there are further pages remaining.
{ "additionalData": { "totalItems": "422", "isLastPage": "true" }, "supportToken": "1171c60d", "retVal": [ { … } ] }
Filter your search to return items whose property has a specific value. Use the syntax: property:operation:value where a colon (:) separates between property, operation and value.
- Property: the name of the property of the item
- Operation:
- equals - true if the value is identical to this value.
- in - true if the value is identical to one of the items in this comma-separated list. E.g. in:value1,value2,value3
- like - true if the property's value is contained within this value
- regex - true if this regular expression resolves as true. The regex is not case sensitive, and special characters must be escaped with a backslash. Special characters include space, double quote ("), '<', '>', '#', '%', '{', '}', vertical bar ('|'), backslash, '^'. To pass an escaped character in a URL in Postman, encode it first. E.g. to return all items whose value begins with a or A, use regex:^a
- Value: the value of the property.
To combine multiple filters, separate each filter with a semicolon with no space. E.g. property1:operation1:value1;property2:operation2:value2
This endpoint supports filtering on the following properties and its supported operators:
- description:[like | equals | regex]:value
- directDependency:[like | equals | regex]:value
- hasNotice:[like | equals | regex]:value
- license:[like | equals | regex | in]:value
- locations:[like | equals | regex]:value
- name:[like | equals | regex]:value
- numberOfLicenses:[equals | gt]:value
- projectName:[like | equals | regex]:value
- type:[like | in | equals | regex]:value
Sort search results alphabetically on an item's property by entering sort= followed by the property name. E.g. enter sort=email to sort alphabetically by their email addresses from a-z ascending.To sort in descending order (z-a), add a minus sign ('-'). E.g. sort=-email.
You can sort by the following properties:
- description
- directDependency
- hasNotice
- license
- locations
- name
- numberOfLicenses
- projectName
- type
- Generated server url
https://api-saas.mend.io/api/v2.0/products/{productToken}/libraries
- Payload
- cURL
- JS
- Go
- Ruby
- Java 8
No request payload
{ "supportToken": "1171c60d", "retVal": [ { … } ] }