{ "info": { "name": "ThreatWeaver API", "description": "Complete API collection for ThreatWeaver. Auto-generated from 41 route modules. 868 endpoints total.", "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json" }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{accessToken}}", "type": "string" } ] }, "variable": [ { "key": "baseUrl", "value": "http://localhost:4005", "description": "Backend API base URL" }, { "key": "accessToken", "value": "", "description": "JWT access token from /api/auth/login" } ], "event": [ { "listen": "prerequest", "script": { "type": "text/javascript", "exec": [ "// Auto-generated by ThreatWeaver Documentation Bible" ] } } ], "item": [ { "name": "Authentication", "description": "Login to get an access token", "item": [ { "name": "Login", "event": [ { "listen": "test", "script": { "type": "text/javascript", "exec": [ "var jsonData = pm.response.json();", "if (jsonData.accessToken) {", " pm.collectionVariables.set(\"accessToken\", jsonData.accessToken);", " console.log(\"Access token saved to collection variables\");", "}" ] } } ], "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/login", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "login" ] }, "body": { "mode": "raw", "raw": "{\n \"email\": \"admin@company.com\",\n \"password\": \"your_password_here\"\n}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "Admin", "description": "48 endpoints from admin.routes.ts", "item": [ { "name": "Severity debug endpoint (authenticated, admin-only)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/severity-debug", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "severity-debug" ] } } }, { "name": "GET /api/admin/roles - List all roles", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/roles", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "roles" ] } } }, { "name": "POST /api/admin/roles - Create role", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/roles", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "roles" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PATCH /api/admin/roles/:id - Update role", "request": { "method": "PATCH", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/roles/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "roles", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /api/admin/roles/:id - Delete role", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/roles/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "roles", ":id" ] } } }, { "name": "GET /api/admin/users - List all users", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/users", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "users" ] } } }, { "name": "POST /api/admin/users - Create user", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/users", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "users" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PATCH /api/admin/users/:id - Update user", "request": { "method": "PATCH", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/users/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "users", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /api/admin/users/:id/reset-password - Reset password", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/users/:id/reset-password", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "users", ":id", "reset-password" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /api/admin/users/:id - Delete user", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/users/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "users", ":id" ] } } }, { "name": "POST /api/admin/users/:id/unlock - Unlock user account", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/users/:id/unlock", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "users", ":id", "unlock" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/admin/settings - Get all settings", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/settings", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "settings" ] } } }, { "name": "PUT /api/admin/settings - Update settings", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/settings", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "settings" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/admin/archives - List archives", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/archives", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "archives" ] } } }, { "name": "POST /api/admin/archives - Create new archive", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/archives", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "archives" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /api/admin/archives/:id/restore - Restore archive", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/archives/:id/restore", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "archives", ":id", "restore" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /api/admin/archives/:id - Delete archive", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/archives/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "archives", ":id" ] } } }, { "name": "GET /api/admin/archives/stats - Get archive storage stats", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/archives/stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "archives", "stats" ] } } }, { "name": "GET /api/admin/sync/gaps - Detect data gaps", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/sync/gaps", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "sync", "gaps" ] } } }, { "name": "POST /api/admin/sync/resume - Resume interrupted job", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/sync/resume", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "sync", "resume" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/admin/sync/job/:id/stats - Get job statistics", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/sync/job/:id/stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "sync", "job", ":id", "stats" ] } } }, { "name": "GET /api/admin/sync/logs - Get granular sync logs (Asset Syncs, etc)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/sync/logs", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "sync", "logs" ] } } }, { "name": "GET /api/admin/sync/config - Get sync configuration", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/sync/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "sync", "config" ] } } }, { "name": "PUT /api/admin/sync/config - Update sync configuration", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/sync/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "sync", "config" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/admin/quarantine - List quarantined records", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/quarantine", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "quarantine" ] } } }, { "name": "GET /api/admin/quarantine/stats - Get quarantine statistics", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/quarantine/stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "quarantine", "stats" ] } } }, { "name": "POST /api/admin/quarantine/:id/resolve - Resolve quarantine record", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/quarantine/:id/resolve", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "quarantine", ":id", "resolve" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/admin/stats/coverage - Get snapshot coverage info", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/stats/coverage", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "stats", "coverage" ] } } }, { "name": "POST /api/admin/stats/backfill - Trigger historical backfill", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/stats/backfill", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "stats", "backfill" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/admin/stats/cleanup-logs - Get stale asset cleanup logs", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/stats/cleanup-logs", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "stats", "cleanup-logs" ] } } }, { "name": "One-time operation that creates the foundation for Option A (event-sourced trendlines)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/diary/seed", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "diary", "seed" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Organic entries are NEVER affected by this operation.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/diary/purge-seeds", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "diary", "purge-seeds" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Returns 202 Accepted immediately with jobId for polling", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/stats/recalculate", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "stats", "recalculate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/admin/stats/recalculate/:jobId - Poll recalculation job status", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/stats/recalculate/:jobId", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "stats", "recalculate", ":jobId" ] } } }, { "name": "GET /api/admin/ratelimit/status - Get current rate limit status", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/ratelimit/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "ratelimit", "status" ] } } }, { "name": "PUT /api/admin/ratelimit/config - Update rate limit config", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/ratelimit/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "ratelimit", "config" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/admin/severity-filter - Get current severity filter settings", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/severity-filter", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "severity-filter" ] } } }, { "name": "PUT /api/admin/severity-filter - Update severity filter settings", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/severity-filter", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "severity-filter" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "MED-8: Added permission check — was accessible to any authenticated user", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/severity-summary", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "severity-summary" ] } } }, { "name": "GET /api/admin/snapshots/validate - Validate snapshot integrity", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/snapshots/validate", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "snapshots", "validate" ] } } }, { "name": "POST /api/admin/snapshots/repair - Force snapshot reconstruction", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/snapshots/repair", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "snapshots", "repair" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "History detail (totalHistoryRuns) is fetched on-demand per-scan via /scans/:scanId/history", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/scan-history/scans", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "scan-history", "scans" ] } } }, { "name": "GET /api/admin/scan-history/scans/:scanId/history — Detail: per-run history with import status", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/scan-history/scans/:scanId/history", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "scan-history", "scans", ":scanId", "history" ] } } }, { "name": "POST /api/admin/scan-history/import — Start a new import job", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/scan-history/import", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "scan-history", "import" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/admin/scan-history/jobs/:jobId — Poll import job status", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/scan-history/jobs/:jobId", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "scan-history", "jobs", ":jobId" ] } } }, { "name": "GET /api/admin/scan-history/jobs — List all import jobs", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/scan-history/jobs", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "scan-history", "jobs" ] } } }, { "name": "POST /api/admin/scan-history/jobs/:jobId/cancel — Cancel a running import job", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/scan-history/jobs/:jobId/cancel", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "scan-history", "jobs", ":jobId", "cancel" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /api/admin/scan-history/jobs/:jobId/retry-failed — Retry only failed runs from a previous job", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/admin/scan-history/jobs/:jobId/retry-failed", "host": [ "{{baseUrl}}" ], "path": [ "api", "admin", "scan-history", "jobs", ":jobId", "retry-failed" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "Agent", "description": "2 endpoints from agent.routes.ts", "item": [ { "name": "Data is stored in the tenant's isolated schema.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/agent/ingest", "host": [ "{{baseUrl}}" ], "path": [ "api", "agent", "ingest" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Agent health check endpoint.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/agent/health", "host": [ "{{baseUrl}}" ], "path": [ "api", "agent", "health" ] } } } ] }, { "name": "AI Labs", "description": "37 endpoints from ai.routes.ts", "item": [ { "name": "── Health ──────────────────────────────────────────────────────────────────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/health", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "health" ] } } }, { "name": "List all providers", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/providers", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "providers" ] } } }, { "name": "Create provider", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/providers", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "providers" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Seed default providers", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/providers/seed", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "providers", "seed" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Get single provider", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/providers/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "providers", ":id" ] } } }, { "name": "Update provider", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/providers/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "providers", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Set provider as default", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/providers/:id/default", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "providers", ":id", "default" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Test connection to a provider (Ollama / LM Studio / OpenAI / Anthropic / OpenRouter) — lightweight ping", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/providers/:id/test-connection", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "providers", ":id", "test-connection" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Accepts optional { endpoint, apiKey } in body to test before saving", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/providers/:id/models", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "providers", ":id", "models" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Delete provider", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/providers/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "providers", ":id" ] } } }, { "name": "List current user's personal providers", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/user-providers", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "user-providers" ] } } }, { "name": "Add a personal provider", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/user-providers", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "user-providers" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Update a personal provider", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/user-providers/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "user-providers", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Set a personal provider as preferred (overrides global default for this user)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/user-providers/:id/preferred", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "user-providers", ":id", "preferred" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Clear preferred provider (revert to global default)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/user-providers/clear-preferred", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "user-providers", "clear-preferred" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Test connection for a personal provider", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/user-providers/:id/test", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "user-providers", ":id", "test" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Discover models on a personal provider", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/user-providers/:id/models", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "user-providers", ":id", "models" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Delete a personal provider", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/user-providers/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "user-providers", ":id" ] } } }, { "name": "List templates (optionally filtered by feature)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/prompts", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "prompts" ] } } }, { "name": "Create template", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/prompts", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "prompts" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Seed default templates", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/prompts/seed", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "prompts", "seed" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Get single template", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/prompts/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "prompts", ":id" ] } } }, { "name": "Update template", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/prompts/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "prompts", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Execute AI feature", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/execute", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "execute" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Execute AI feature for a specific vulnerability (auto-fill from DB)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/execute-for-vuln", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "execute-for-vuln" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Get summary context for executive summary auto-fill", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/summary-context", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "summary-context" ] } } }, { "name": "Send a chat message (creates or continues a conversation)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/chat", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "chat" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "List user's conversations", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/conversations", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "conversations" ] } } }, { "name": "Get a specific conversation", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/conversations/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "conversations", ":id" ] } } }, { "name": "Admin: get usage stats (all users)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/usage/stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "usage", "stats" ] } } }, { "name": "Admin: get detailed usage logs (paginated)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/usage/logs", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "usage", "logs" ] } } }, { "name": "── Compliance Audit Export ──────────────────────────────────────────────────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/audit/export", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "audit", "export" ] } } }, { "name": "List user's generated reports (supports type, search, sort query params)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/reports", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "reports" ] } } }, { "name": "Delete a report", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/reports/:reportId", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "reports", ":reportId" ] } } }, { "name": "Download a generated report (checks cache → DB fallback, ownership-scoped)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/reports/download/:reportId", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "reports", "download", ":reportId" ] } } }, { "name": "User: get own usage", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/usage/my", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "usage", "my" ] } } }, { "name": "Search vulnerabilities for AI feature auto-fill pickers", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai/vulnerability-search", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai", "vulnerability-search" ] } } } ] }, { "name": "AI Security", "description": "12 endpoints from aiSecurity.routes.ts", "item": [ { "name": "risks-by-category, tools-by-category, and risks-by-severity.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai-security/dashboard", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai-security", "dashboard" ] } } }, { "name": "Query params: status (approved|pending_review|blocked|shadow), category", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai-security/tools", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai-security", "tools" ] } } }, { "name": "Register a new AI tool.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai-security/tools", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai-security", "tools" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Update tool fields (status, risk score, metadata, etc.)", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai-security/tools/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai-security", "tools", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /api/ai-security/tools/:id", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai-security/tools/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai-security", "tools", ":id" ] } } }, { "name": "Query params: severity (critical|high|medium|low), status (open|acknowledged|mitigated|false_positive)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai-security/risks", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai-security", "risks" ] } } }, { "name": "Move risk status to acknowledged.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai-security/risks/:id/acknowledge", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai-security", "risks", ":id", "acknowledge" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Mark risk as mitigated with timestamp.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai-security/risks/:id/mitigate", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai-security", "risks", ":id", "mitigate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/ai-security/policies", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai-security/policies", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai-security", "policies" ] } } }, { "name": "POST /api/ai-security/policies", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai-security/policies", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai-security", "policies" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /api/ai-security/policies/:id", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai-security/policies/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai-security", "policies", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /api/ai-security/policies/:id", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/ai-security/policies/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "ai-security", "policies", ":id" ] } } } ] }, { "name": "Anomaly Detection", "description": "5 endpoints from anomaly.routes.ts", "item": [ { "name": "Get anomaly detection summary (counts and recent anomalies)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/anomaly/summary", "host": [ "{{baseUrl}}" ], "path": [ "api", "anomaly", "summary" ] } } }, { "name": "Query: ?days=30 (default 30)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/anomaly/dates", "host": [ "{{baseUrl}}" ], "path": [ "api", "anomaly", "dates" ] } } }, { "name": "Body: { date: \"2026-01-17\" }", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/anomaly/detect", "host": [ "{{baseUrl}}" ], "path": [ "api", "anomaly", "detect" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Body: { status: \"CONFIRMED_ANOMALY\" | \"FALSE_ALARM\" | \"EXCLUDED\", notes?: string }", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/anomaly/:date/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "anomaly", ":date", "status" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Run anomaly detection for recent days (Admin only)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/anomaly/run-detection", "host": [ "{{baseUrl}}" ], "path": [ "api", "anomaly", "run-detection" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "API Configuration", "description": "6 endpoints from apiConfig.routes.ts", "item": [ { "name": "Get current API configuration (keys are masked)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/api-config", "host": [ "{{baseUrl}}" ], "path": [ "api", "api-config" ] } } }, { "name": "Update API configuration", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/api-config", "host": [ "{{baseUrl}}" ], "path": [ "api", "api-config" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "This handles E2EE encrypted requests that use POST with method override", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/api-config", "host": [ "{{baseUrl}}" ], "path": [ "api", "api-config" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Test API connection with provided keys", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/api-config/test", "host": [ "{{baseUrl}}" ], "path": [ "api", "api-config", "test" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Toggle demo/production mode", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/api-config/mode", "host": [ "{{baseUrl}}" ], "path": [ "api", "api-config", "mode" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Uses the streaming sync service to avoid memory issues with large datasets", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/api-config/sync-now", "host": [ "{{baseUrl}}" ], "path": [ "api", "api-config", "sync-now" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "AppSec", "description": "113 endpoints from appsec.routes.ts", "item": [ { "name": "GET /targets - List all pentest targets for the org", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/targets", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "targets" ] } } }, { "name": "GET /targets/:id - Get target details", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/targets/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "targets", ":id" ] } } }, { "name": "POST /targets - Create a new target", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/targets", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "targets" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /targets/:id - Update target", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/targets/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "targets", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /targets/:id - Archive (soft-delete) target", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/targets/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "targets", ":id" ] } } }, { "name": "Upload API spec/collection for target", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/targets/:id/upload-spec", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "targets", ":id", "upload-spec" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Seed test cases", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/test-cases/seed", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "test-cases", "seed" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /assessments - List assessments (with optional targetId filter)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments" ] } } }, { "name": "GET /assessments/:id - Get assessment details", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id" ] } } }, { "name": "GET /assessments/:id/scan-budget — returns scan budget stats (admin-only via view_scan_budget permission)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/scan-budget", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "scan-budget" ] } } }, { "name": "POST /assessments - Create and optionally start an assessment", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PATCH /assessments/:id - Update assessment config (only when queued, completed, failed, or cancelled)", "request": { "method": "PATCH", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "SECURITY: Request body contains credentials. NEVER log req.body. NEVER cache.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/ai-assessment-builder/generate", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "ai-assessment-builder", "generate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /assessments/validate-auth - Test an auth profile configuration (MUST be before /:id routes)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/validate-auth", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", "validate-auth" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /assessments/test-token-generation - Test token generation config (MUST be before /:id routes)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/test-token-generation", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", "test-token-generation" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /assessments/:id/scan-context - Get assessment scan context", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/scan-context", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "scan-context" ] } } }, { "name": "PUT /assessments/:id/scan-context - Update assessment scan context", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/scan-context", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "scan-context" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /assessments/:id/start - Start a queued assessment (P1-15)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/start", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "start" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /assessments/:id/rerun - Create a new run within the same assessment series", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/rerun", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "rerun" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /assessments/:id/runs - Get all runs for an assessment series", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/runs", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "runs" ] } } }, { "name": "POST /assessments/:id/stop - Stop a running assessment (P1-15)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/stop", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "stop" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /assessments/:id/pause - Pause a running assessment", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/pause", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "pause" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /assessments/:id/resume - Resume a paused assessment", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/resume", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "resume" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /assessments/:id - Delete an assessment (must not be running)", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id" ] } } }, { "name": "POST /assessments/:id/schedule - Create or update a schedule for an assessment", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/schedule", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "schedule" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /assessments/:id/schedule - Disable and remove a schedule from an assessment", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/schedule", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "schedule" ] } } }, { "name": "GET /assessments/:id/schedule - Get schedule info for an assessment", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/schedule", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "schedule" ] } } }, { "name": "GET /assessments/:id/events - Server-Sent Events for live assessment progress", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/events", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "events" ] } } }, { "name": "GET /assessments/:id/activity - returns persisted activity log", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/activity", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "activity" ] } } }, { "name": "GET /findings - List findings (with assessment/target filters)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/findings", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "findings" ] } } }, { "name": "GET /findings/:id - Get finding with evidence", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/findings/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "findings", ":id" ] } } }, { "name": "PUT /findings/:id/status - Update finding status (confirm, mark false positive, etc.)", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/findings/:id/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "findings", ":id", "status" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /assessments/:id/chains - List exploit chains for an assessment", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/chains", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "chains" ] } } }, { "name": "Used by the frontend Relationship Map tab to render a force-directed graph.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/relationship-map", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "relationship-map" ] } } }, { "name": "GET /assessments/:id/agents - List agent execution logs for an assessment", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/agents", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "agents" ] } } }, { "name": "GET /auth-profiles - List auth profiles for the org", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/auth-profiles", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "auth-profiles" ] } } }, { "name": "POST /auth-profiles - Create auth profile", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/auth-profiles", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "auth-profiles" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /auth-profiles/:id - Update an existing auth profile (name + key fields)", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/auth-profiles/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "auth-profiles", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /auth-profiles/:id/test - Test an existing auth profile using stored credentials", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/auth-profiles/:id/test", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "auth-profiles", ":id", "test" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /auth-profiles/:id - Get a single auth profile by ID", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/auth-profiles/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "auth-profiles", ":id" ] } } }, { "name": "DELETE /auth-profiles/:id - Delete an auth profile", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/auth-profiles/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "auth-profiles", ":id" ] } } }, { "name": "GET /reports - List reports", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/reports", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "reports" ] } } }, { "name": "GET /dashboard - Summary stats for the AppSec workspace", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/dashboard", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "dashboard" ] } } }, { "name": "POST /cicd/trigger — Start an assessment from a CI/CD pipeline (P4-01)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/cicd/trigger", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "cicd", "trigger" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /cicd/:assessmentId/status — Poll assessment status for CI pipeline (P4-01, P4-02)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/cicd/:assessmentId/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "cicd", ":assessmentId", "status" ] } } }, { "name": "POST /cicd/:assessmentId/callback — Manually fire the callback webhook (testing) (P4-04)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/cicd/:assessmentId/callback", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "cicd", ":assessmentId", "callback" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "framework path param: pci-dss | soc2 | iso27001", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/compliance/:framework", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "compliance", ":framework" ] } } }, { "name": "Returns compliance readiness scores for all three frameworks simultaneously.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/compliance", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "compliance" ] } } }, { "name": "Query params: ?redact=true → HTTP evidence/payloads replaced with [REDACTED]", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/report", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "report" ] } } }, { "name": "Query params: ?redact=true → HTTP evidence/payloads replaced with [REDACTED]", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/report/html", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "report", "html" ] } } }, { "name": "Query params: ?redact=true → accepted for API consistency (no-op on exec summary)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/report/executive", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "report", "executive" ] } } }, { "name": "GET /assessments/:id/report/csv — Download findings as a CSV attachment", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/report/csv", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "report", "csv" ] } } }, { "name": "GET /assessments/:id/report/excel — Download findings as Excel (or CSV fallback)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/report/excel", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "report", "excel" ] } } }, { "name": "GET /assessments/:id/report/attestation — Formal pentest attestation HTML document", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/report/attestation", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "report", "attestation" ] } } }, { "name": "GET /assessments/:id/sarif — Download findings in SARIF v2.1.0 format", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/sarif", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "sarif" ] } } }, { "name": "POST /findings/:id/retest - Re-run only the relevant agent for a single finding", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/findings/:id/retest", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "findings", ":id", "retest" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /findings/:id/remediation - Get remediation history for a finding", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/findings/:id/remediation", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "findings", ":id", "remediation" ] } } }, { "name": "POST /findings/:id/ai-analysis - AI-powered finding analysis", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/findings/:id/ai-analysis", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "findings", ":id", "ai-analysis" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /findings/:id/status - Update finding remediation status", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/findings/:id/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "findings", ":id", "status" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /assessments/:id/remediation-summary - Aggregate remediation stats for an assessment", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/remediation-summary", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "remediation-summary" ] } } }, { "name": "GET /ai-config - Get AI residency mode and feature flags", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/ai-config", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "ai-config" ] } } }, { "name": "PUT /ai-config - Save AI residency mode and feature flags", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/ai-config", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "ai-config" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /appsec/settings - Get AppSec-specific settings", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/settings", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "settings" ] } } }, { "name": "PUT /appsec/settings - Update AppSec-specific settings", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/settings", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "settings" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /sensitive-patterns - List all patterns (built-in + org custom), filterable", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/sensitive-patterns", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "sensitive-patterns" ] } } }, { "name": "POST /sensitive-patterns - Create a custom pattern (org-scoped)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/sensitive-patterns", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "sensitive-patterns" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /sensitive-patterns/:id - Update a pattern (only org-owned, not built-in)", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/sensitive-patterns/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "sensitive-patterns", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /sensitive-patterns/:id - Delete a custom pattern (not built-in)", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/sensitive-patterns/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "sensitive-patterns", ":id" ] } } }, { "name": "POST /sensitive-patterns/test - Test a regex pattern against sample text", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/sensitive-patterns/test", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "sensitive-patterns", "test" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /sensitive-patterns/generate-regex - AI-powered English-to-Regex conversion", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/sensitive-patterns/generate-regex", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "sensitive-patterns", "generate-regex" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /sensitive-patterns/industries - List available industries with pattern counts", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/sensitive-patterns/industries", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "sensitive-patterns", "industries" ] } } }, { "name": "POST /sensitive-patterns/industries/select - Save org's selected industries", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/sensitive-patterns/industries/select", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "sensitive-patterns", "industries", "select" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /sensitive-patterns/:id/toggle - Enable/disable a pattern", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/sensitive-patterns/:id/toggle", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "sensitive-patterns", ":id", "toggle" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /sensitive-patterns/seed - Seed built-in patterns (admin only)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/sensitive-patterns/seed", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "sensitive-patterns", "seed" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "List all OSINT services with their status", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/osint-services", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "osint-services" ] } } }, { "name": "Save/update API key for a service", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/osint-services/:serviceName/key", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "osint-services", ":serviceName", "key" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Delete API key", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/osint-services/:id/key", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "osint-services", ":id", "key" ] } } }, { "name": "Toggle API key enabled/disabled", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/osint-services/:id/toggle", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "osint-services", ":id", "toggle" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Validate/test API key", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/osint-services/:serviceName/validate", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "osint-services", ":serviceName", "validate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Server health endpoint (admin only)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/server-health", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "server-health" ] } } }, { "name": "Update server health thresholds (admin only)", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/server-health/thresholds", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "server-health", "thresholds" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Get current thresholds (admin only)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/server-health/thresholds", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "server-health", "thresholds" ] } } }, { "name": "── Coverage Report ─────────────────────────────────────────────────────────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/coverage", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "coverage" ] } } }, { "name": "Returns: { ticketId, ticketUrl }", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/findings/:id/jira-ticket", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "findings", ":id", "jira-ticket" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "If the finding does not yet have a businessImpact, computes it on the fly.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/findings/:id/business-impact", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "findings", ":id", "business-impact" ] } } }, { "name": "and accepted-risk findings.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:id/scan-diff", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":id", "scan-diff" ] } } }, { "name": "for a specific target. Useful for tracking finding trends over time.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/targets/:targetId/finding-history", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "targets", ":targetId", "finding-history" ] } } }, { "name": "when it was first discovered, re-detected, fixed, regressed, etc.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/findings/:findingId/timeline", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "findings", ":findingId", "timeline" ] } } }, { "name": "set retention period). Stored in the target's metadata JSONB field.", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/targets/:id/scan-history-config", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "targets", ":id", "scan-history-config" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /exceptions — Request a new exception for a finding", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/exceptions", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "exceptions" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /exceptions — List ALL exceptions across all targets (global view)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/exceptions", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "exceptions" ] } } }, { "name": "GET /targets/:targetId/exceptions — List exceptions for a target", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/targets/:targetId/exceptions", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "targets", ":targetId", "exceptions" ] } } }, { "name": "GET /exceptions/:id — Get a single exception", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/exceptions/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "exceptions", ":id" ] } } }, { "name": "POST /exceptions/:id/review — Level 1 review", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/exceptions/:id/review", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "exceptions", ":id", "review" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /exceptions/:id/second-review — Level 2 review (High/Critical)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/exceptions/:id/second-review", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "exceptions", ":id", "second-review" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /exceptions/:id/revoke — Revoke an approved exception", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/exceptions/:id/revoke", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "exceptions", ":id", "revoke" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /exceptions/:id/extend — Extend an approved exception", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/exceptions/:id/extend", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "exceptions", ":id", "extend" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /scan-templates — List all templates for the org", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/scan-templates", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "scan-templates" ] } } }, { "name": "GET /scan-templates/:id — Get single template", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/scan-templates/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "scan-templates", ":id" ] } } }, { "name": "POST /scan-templates — Create a new template", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/scan-templates", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "scan-templates" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /scan-templates/:id — Update a template", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/scan-templates/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "scan-templates", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /scan-templates/:id — Delete a template (blocks default templates)", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/scan-templates/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "scan-templates", ":id" ] } } }, { "name": "POST /scan-templates/seed — Seed default templates for the org", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/scan-templates/seed", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "scan-templates", "seed" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Security: validates assessmentId belongs to org before subscribing.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:assessmentId/phase0/stream", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":assessmentId", "phase0", "stream" ] } } }, { "name": "Submit a user answer to a Phase 0 question.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:assessmentId/phase0/answer", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":assessmentId", "phase0", "answer" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Max raw size: 1 MB (matches the global Express JSON body parser limit).", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/assessments/:assessmentId/phase0/upload", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "assessments", ":assessmentId", "phase0", "upload" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /credentials — list all credentials for the org (passwords/tokens never returned)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/credentials", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "credentials" ] } } }, { "name": "POST /credentials — create a new credential", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/credentials", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "credentials" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /credentials/:id — update a credential", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/credentials/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "credentials", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /credentials/:id — delete a credential", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/credentials/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "credentials", ":id" ] } } }, { "name": "POST /credentials/:id/test — test a credential by doing a live login request", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/credentials/:id/test", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "credentials", ":id", "test" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Writes a mandatory CREDENTIAL_PICKED audit event (public schema, non-tenant-specific).", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/credentials/:id/pick", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "credentials", ":id", "pick" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Writes a mandatory AUTH_PROFILE_PICKED audit event.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/auth-profiles/:id/pick", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "auth-profiles", ":id", "pick" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "AppSec CI/CD", "description": "3 endpoints from appsecCiScan.routes.ts", "item": [ { "name": "=============================================================================", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/ci/scan", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "ci", "scan" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "=============================================================================", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/ci/scan/:assessmentId/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "ci", "scan", ":assessmentId", "status" ] } } }, { "name": "=============================================================================", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/appsec/ci/scan/:assessmentId/results", "host": [ "{{baseUrl}}" ], "path": [ "api", "appsec", "ci", "scan", ":assessmentId", "results" ] } } } ] }, { "name": "Asset Groups", "description": "8 endpoints from assetGroups.routes.ts", "item": [ { "name": "Response: { success: true, groups: GroupSummary[], total: number }", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/asset-groups", "host": [ "{{baseUrl}}" ], "path": [ "api", "asset-groups" ] } } }, { "name": "Response: { success: true, group: AssetGroup }", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/asset-groups", "host": [ "{{baseUrl}}" ], "path": [ "api", "asset-groups" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Response: { success: true, uuids: string[], total: number }", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/asset-groups/preview", "host": [ "{{baseUrl}}" ], "path": [ "api", "asset-groups", "preview" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Response: { success: true, group: AssetGroup }", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/asset-groups/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "asset-groups", ":id" ] } } }, { "name": "Response: { success: true, group: AssetGroup }", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/asset-groups/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "asset-groups", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Response: { success: true, message: string }", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/asset-groups/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "asset-groups", ":id" ] } } }, { "name": "Response: { success: true, assets: Asset[], total: number, uuids: string[], page: number, limit: number }", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/asset-groups/:id/assets", "host": [ "{{baseUrl}}" ], "path": [ "api", "asset-groups", ":id", "assets" ] } } }, { "name": "Response: { success: true, uuids: string[], total: number }", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/asset-groups/:id/resolve", "host": [ "{{baseUrl}}" ], "path": [ "api", "asset-groups", ":id", "resolve" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "Asset Ownership", "description": "4 endpoints from assetOwnership.routes.ts", "item": [ { "name": "─── GET / — List ownership (paginated) ──────────────────────────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/asset-ownership", "host": [ "{{baseUrl}}" ], "path": [ "api", "asset-ownership" ] } } }, { "name": "─── GET /:assetUuid — Single asset ownership ───────────────────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/asset-ownership/:assetUuid", "host": [ "{{baseUrl}}" ], "path": [ "api", "asset-ownership", ":assetUuid" ] } } }, { "name": "─── PUT /:assetUuid — Set/update ownership (admin/analyst) ─────", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/asset-ownership/:assetUuid", "host": [ "{{baseUrl}}" ], "path": [ "api", "asset-ownership", ":assetUuid" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "─── POST /import-csv — Bulk CSV import (admin) ─────────────────", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/asset-ownership/import-csv", "host": [ "{{baseUrl}}" ], "path": [ "api", "asset-ownership", "import-csv" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "Assets", "description": "3 endpoints from assets.routes.ts", "item": [ { "name": "Get all assets from local database (synced from Tenable.io)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/assets", "host": [ "{{baseUrl}}" ], "path": [ "api", "assets" ] } } }, { "name": "Get quick summary of assets for dashboard", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/assets/summary", "host": [ "{{baseUrl}}" ], "path": [ "api", "assets", "summary" ] } } }, { "name": "Returns: { assetUuid: { total, critical, high, medium, low } }", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/assets/vulnerability-counts", "host": [ "{{baseUrl}}" ], "path": [ "api", "assets", "vulnerability-counts" ] } } } ] }, { "name": "Audit", "description": "1 endpoints from audit.routes.ts", "item": [ { "name": "eventType — optional filter by event type string", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/audit/events", "host": [ "{{baseUrl}}" ], "path": [ "api", "audit", "events" ] } } } ] }, { "name": "Authentication", "description": "17 endpoints from auth.routes.ts", "item": [ { "name": "Login endpoint - SECURE: validates credentials properly", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/login", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "login" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Change Password - Authenticated", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/change-password", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "change-password" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Admin-initiated password reset", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/admin/reset-password", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "admin", "reset-password" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "MFA VALIDATION (Finalize Login)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/mfa/validate", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "mfa", "validate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "MFA SETUP - Initiate", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/mfa/setup", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "mfa", "setup" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "MFA SETUP - Verify & Enable", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/mfa/verify", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "mfa", "verify" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Token refresh endpoint", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/refresh", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "refresh" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Logout endpoint", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/logout", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "logout" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Get current user info", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/me", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "me" ] } } }, { "name": "is the SHA-256 hash comparison against the DB.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/invite/accept", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "invite", "accept" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "resolves the chosen tenant, finds the user in that schema, and issues full session tokens.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/select-tenant", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "select-tenant" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Requires authentication. Issues new session tokens for the target tenant.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/switch-tenant", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "switch-tenant" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Used by the frontend tenant switcher in the nav bar.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/my-tenants", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "my-tenants" ] } } }, { "name": "Initiate a password reset. Always returns the same response to prevent enumeration.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/forgot-password", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "forgot-password" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Complete a password reset using the token from the forgot-password email.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/reset-password", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "reset-password" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Health check for auth service (no auth required)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/health", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "health" ] } } }, { "name": "Public Key Endpoint for E2EE (No Auth Required)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/auth/public-key", "host": [ "{{baseUrl}}" ], "path": [ "api", "auth", "public-key" ] } } } ] }, { "name": "Dashboards", "description": "30 endpoints from dashboard.routes.ts", "item": [ { "name": "Get KPIs - OPTIMIZED: Uses DB aggregation instead of API calls", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/kpis", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "kpis" ] } } }, { "name": "Get category summaries", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/categories", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "categories" ] } } }, { "name": "Get trend data - OPTIMIZED: Uses DB-based trend generation", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/trends", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "trends" ] } } }, { "name": "Get severity distribution - OPTIMIZED: Uses DB aggregation", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/severity", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "severity" ] } } }, { "name": "Supports query params: ?category=windows_server&timeRange=30d", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/all", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "all" ] } } }, { "name": "Health check for Tenable API", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/health", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "health" ] } } }, { "name": "Get category counts for dashboard tabs", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/categories/counts", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "categories", "counts" ] } } }, { "name": "Maintenance: Backfill OS categories (Admin only)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/maintenance/backfill-categories", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "maintenance", "backfill-categories" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Maintenance: Backfill Category Stats (Admin only)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/maintenance/backfill-stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "maintenance", "backfill-stats" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "List all dashboards for current user", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/multi/list", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "multi", "list" ] } } }, { "name": "Get dashboard with widgets", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/multi/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "multi", ":id" ] } } }, { "name": "Create dashboard", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/multi", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "multi" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Update dashboard", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/multi/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "multi", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Soft delete dashboard", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/multi/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "multi", ":id" ] } } }, { "name": "Duplicate dashboard", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/multi/:id/duplicate", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "multi", ":id", "duplicate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Set as default dashboard", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/multi/:id/default", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "multi", ":id", "default" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Add widget to dashboard", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/multi/:id/widgets", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "multi", ":id", "widgets" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Update widget", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/multi/:id/widgets/:widgetId", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "multi", ":id", "widgets", ":widgetId" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Remove widget", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/multi/:id/widgets/:widgetId", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "multi", ":id", "widgets", ":widgetId" ] } } }, { "name": "Fetch data for widget config", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/widgets/data", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "widgets", "data" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Batch fetch for multiple widgets", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/widgets/data/batch", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "widgets", "data", "batch" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "List groups", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/groups", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "groups" ] } } }, { "name": "Create group", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/groups", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "groups" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Delete group", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/groups/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "groups", ":id" ] } } }, { "name": "List all widget templates", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/templates/widgets", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "templates", "widgets" ] } } }, { "name": "Get widget template details", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/templates/widgets/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "templates", "widgets", ":id" ] } } }, { "name": "Seed default widget templates (admin only)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/templates/widgets/seed", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "templates", "widgets", "seed" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "List dashboard templates", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/templates/dashboards", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "templates", "dashboards" ] } } }, { "name": "Instantiate dashboard from template", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/templates/dashboards/:id/instantiate", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "templates", "dashboards", ":id", "instantiate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Seed all defaults (admin only)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/dashboard/seed", "host": [ "{{baseUrl}}" ], "path": [ "api", "dashboard", "seed" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "Date Exclusions", "description": "9 endpoints from dateExclusions.routes.ts", "item": [ { "name": "Query params: days (default 30)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/date-exclusions", "host": [ "{{baseUrl}}" ], "path": [ "api", "date-exclusions" ] } } }, { "name": "Query params: days (default 30)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/date-exclusions/stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "date-exclusions", "stats" ] } } }, { "name": "NOTE: This route MUST be defined before /:date to prevent Express from matching '/bulk' as a date param", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/date-exclusions/bulk", "host": [ "{{baseUrl}}" ], "path": [ "api", "date-exclusions", "bulk" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Body: { isExcluded: boolean, reason?: string }", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/date-exclusions/:date", "host": [ "{{baseUrl}}" ], "path": [ "api", "date-exclusions", ":date" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Get simple list of all excluded dates (for quick lookups)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/date-exclusions/excluded-list", "host": [ "{{baseUrl}}" ], "path": [ "api", "date-exclusions", "excluded-list" ] } } }, { "name": "Get summary of auto-detected anomalies vs manual exclusions", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/date-exclusions/detection-summary", "host": [ "{{baseUrl}}" ], "path": [ "api", "date-exclusions", "detection-summary" ] } } }, { "name": "Body: { days?: number } (default 7)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/date-exclusions/run-detection", "host": [ "{{baseUrl}}" ], "path": [ "api", "date-exclusions", "run-detection" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Body: { status: 'CONFIRMED' | 'FALSE_ALARM', excludeFromKPIs: boolean }", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/date-exclusions/:date/anomaly-status", "host": [ "{{baseUrl}}" ], "path": [ "api", "date-exclusions", ":date", "anomaly-status" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Trigger anomaly detection for a specific date", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/date-exclusions/:date/detect", "host": [ "{{baseUrl}}" ], "path": [ "api", "date-exclusions", ":date", "detect" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "Delta", "description": "2 endpoints from delta.routes.ts", "item": [ { "name": "currentEndpoints — array of ApiEndpoint objects from latest discovery", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/delta/compare", "host": [ "{{baseUrl}}" ], "path": [ "api", "delta", "compare" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "reflect \"all baseline endpoints removed\".", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/delta/:baselineId/summary", "host": [ "{{baseUrl}}" ], "path": [ "api", "delta", ":baselineId", "summary" ] } } } ] }, { "name": "Export", "description": "7 endpoints from export.routes.ts", "item": [ { "name": "Start an async export job (recommended for large datasets)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/export/vulnerabilities/start", "host": [ "{{baseUrl}}" ], "path": [ "api", "export", "vulnerabilities", "start" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Get the status of an async export job", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/export/vulnerabilities/status/:jobId", "host": [ "{{baseUrl}}" ], "path": [ "api", "export", "vulnerabilities", "status", ":jobId" ] } } }, { "name": "Download a completed export file", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/export/vulnerabilities/download/:jobId", "host": [ "{{baseUrl}}" ], "path": [ "api", "export", "vulnerabilities", "download", ":jobId" ] } } }, { "name": "NOTE: This loads all data in memory. For large datasets, use /start endpoint instead.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/export/vulnerabilities", "host": [ "{{baseUrl}}" ], "path": [ "api", "export", "vulnerabilities" ] } } }, { "name": "Get export summary with data source info", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/export/summary", "host": [ "{{baseUrl}}" ], "path": [ "api", "export", "summary" ] } } }, { "name": "Supports pagination: limit, offset", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/export/sync-logs", "host": [ "{{baseUrl}}" ], "path": [ "api", "export", "sync-logs" ] } } }, { "name": "Download sync logs as CSV", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/export/sync-logs/download", "host": [ "{{baseUrl}}" ], "path": [ "api", "export", "sync-logs", "download" ] } } } ] }, { "name": "Integrations", "description": "15 endpoints from integration.routes.ts", "item": [ { "name": "═══════════════════════════════════════════════════════════════════", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/integrations/docs/openapi", "host": [ "{{baseUrl}}" ], "path": [ "api", "integrations", "docs", "openapi" ] } } }, { "name": "─── Webhook Delivery Logs (must be BEFORE /:id to avoid collision) ──", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/integrations/webhooks/deliveries", "host": [ "{{baseUrl}}" ], "path": [ "api", "integrations", "webhooks", "deliveries" ] } } }, { "name": "POST /api/integrations/webhooks/deliveries/:id/retry", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/integrations/webhooks/deliveries/:id/retry", "host": [ "{{baseUrl}}" ], "path": [ "api", "integrations", "webhooks", "deliveries", ":id", "retry" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "─── Webhooks CRUD ───────────────────────────────────────────────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/integrations/webhooks", "host": [ "{{baseUrl}}" ], "path": [ "api", "integrations", "webhooks" ] } } }, { "name": "POST /api/integrations/webhooks", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/integrations/webhooks", "host": [ "{{baseUrl}}" ], "path": [ "api", "integrations", "webhooks" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/integrations/webhooks/:id", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/integrations/webhooks/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "integrations", "webhooks", ":id" ] } } }, { "name": "PUT /api/integrations/webhooks/:id", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/integrations/webhooks/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "integrations", "webhooks", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /api/integrations/webhooks/:id", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/integrations/webhooks/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "integrations", "webhooks", ":id" ] } } }, { "name": "POST /api/integrations/webhooks/:id/test", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/integrations/webhooks/:id/test", "host": [ "{{baseUrl}}" ], "path": [ "api", "integrations", "webhooks", ":id", "test" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "─── Integrations CRUD ───────────────────────────────────────────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/integrations/integrations", "host": [ "{{baseUrl}}" ], "path": [ "api", "integrations", "integrations" ] } } }, { "name": "POST /api/integrations/integrations", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/integrations/integrations", "host": [ "{{baseUrl}}" ], "path": [ "api", "integrations", "integrations" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/integrations/integrations/:id", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/integrations/integrations/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "integrations", "integrations", ":id" ] } } }, { "name": "PUT /api/integrations/integrations/:id", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/integrations/integrations/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "integrations", "integrations", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /api/integrations/integrations/:id", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/integrations/integrations/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "integrations", "integrations", ":id" ] } } }, { "name": "POST /api/integrations/integrations/:id/test", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/integrations/integrations/:id/test", "host": [ "{{baseUrl}}" ], "path": [ "api", "integrations", "integrations", ":id", "test" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "Internal", "description": "15 endpoints from internal.routes.ts", "item": [ { "name": "The old \"slug\" field is accepted for backwards compatibility but customerId is preferred.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/internal/provision-tenant", "host": [ "{{baseUrl}}" ], "path": [ "api", "internal", "provision-tenant" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Idempotent — safe to call multiple times.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/internal/repair-tenants", "host": [ "{{baseUrl}}" ], "path": [ "api", "internal", "repair-tenants" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Accepts customerId (new) or slug (legacy) for backwards compatibility.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/internal/update-tenant-status", "host": [ "{{baseUrl}}" ], "path": [ "api", "internal", "update-tenant-status" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Called by License Manager for monitoring.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/internal/tenant-health/:slug", "host": [ "{{baseUrl}}" ], "path": [ "api", "internal", "tenant-health", ":slug" ] } } }, { "name": "Check the status of an async provisioning job.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/internal/provisioning-status/:jobId", "host": [ "{{baseUrl}}" ], "path": [ "api", "internal", "provisioning-status", ":jobId" ] } } }, { "name": "Returns today's API usage count for a tenant.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/internal/tenant-usage/:slug", "host": [ "{{baseUrl}}" ], "path": [ "api", "internal", "tenant-usage", ":slug" ] } } }, { "name": "Create or re-send an invite for a user in a tenant schema.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/internal/invite-user", "host": [ "{{baseUrl}}" ], "path": [ "api", "internal", "invite-user" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Accepts both {newToken, newExpires} and {inviteToken, inviteExpires} field names.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/internal/resend-invite", "host": [ "{{baseUrl}}" ], "path": [ "api", "internal", "resend-invite" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Generate a password-reset token for a user and return the raw token + URL.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/internal/reset-user-password", "host": [ "{{baseUrl}}" ], "path": [ "api", "internal", "reset-user-password" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Deactivate a user — sets status='deactivated' and marks routing as inactive.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/internal/deactivate-user", "host": [ "{{baseUrl}}" ], "path": [ "api", "internal", "deactivate-user" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Reactivate a previously deactivated user.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/internal/reactivate-user", "host": [ "{{baseUrl}}" ], "path": [ "api", "internal", "reactivate-user" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "List all users in a tenant schema. Never returns passwordHash.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/internal/tenant-users/:customerId", "host": [ "{{baseUrl}}" ], "path": [ "api", "internal", "tenant-users", ":customerId" ] } } }, { "name": "Called by TLM dashboard to show live deployment data.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/internal/deployment-summary", "host": [ "{{baseUrl}}" ], "path": [ "api", "internal", "deployment-summary" ] } } }, { "name": "Requires confirmToken = SHA-256(customerId + \"DEPROVISION\") for safety.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/internal/deprovision-tenant", "host": [ "{{baseUrl}}" ], "path": [ "api", "internal", "deprovision-tenant" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Only works if tenant is already deprovisioned AND past hardDeleteAfter date.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/internal/hard-delete-tenant", "host": [ "{{baseUrl}}" ], "path": [ "api", "internal", "hard-delete-tenant" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "License", "description": "6 endpoints from license.routes.ts", "item": [ { "name": "Public endpoint — returns whether the app needs license activation.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/license/activation-status", "host": [ "{{baseUrl}}" ], "path": [ "api", "license", "activation-status" ] } } }, { "name": "POST /api/license/activate", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/license/activate", "host": [ "{{baseUrl}}" ], "path": [ "api", "license", "activate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Does NOT require admin role.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/license/modules", "host": [ "{{baseUrl}}" ], "path": [ "api", "license", "modules" ] } } }, { "name": "Available to any authenticated user (not just admin).", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/license/tenant-entitlements", "host": [ "{{baseUrl}}" ], "path": [ "api", "license", "tenant-entitlements" ] } } }, { "name": "Requires: admin or vendor_admin role.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/license/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "license", "status" ] } } }, { "name": "Requires: admin or vendor_admin role.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/license/import", "host": [ "{{baseUrl}}" ], "path": [ "api", "license", "import" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "Notifications", "description": "7 endpoints from notification.routes.ts", "item": [ { "name": "Each sub-query is wrapped in try/catch so missing tables degrade to 0.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/notifications/badge-counts", "host": [ "{{baseUrl}}" ], "path": [ "api", "notifications", "badge-counts" ] } } }, { "name": "─── GET / — User's notifications (paginated) ───────────────────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/notifications", "host": [ "{{baseUrl}}" ], "path": [ "api", "notifications" ] } } }, { "name": "─── GET /unread-count — Unread notification count ───────────────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/notifications/unread-count", "host": [ "{{baseUrl}}" ], "path": [ "api", "notifications", "unread-count" ] } } }, { "name": "─── PUT /read-all — Mark all notifications as read ──────────────", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/notifications/read-all", "host": [ "{{baseUrl}}" ], "path": [ "api", "notifications", "read-all" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "─── PUT /:id/read — Mark single notification as read ────────────", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/notifications/:id/read", "host": [ "{{baseUrl}}" ], "path": [ "api", "notifications", ":id", "read" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "─── GET /config — Admin: get notification config ────────────────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/notifications/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "notifications", "config" ] } } }, { "name": "─── PUT /config — Admin: update notification config ─────────────", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/notifications/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "notifications", "config" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "OS Categories", "description": "8 endpoints from osCategoryRules.routes.ts", "item": [ { "name": "GET /api/admin/os-categories — list all rules", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/os-category-rules", "host": [ "{{baseUrl}}" ], "path": [ "api", "os-category-rules" ] } } }, { "name": "NOTE: Must be defined before /:id to avoid being shadowed", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/os-category-rules/coverage", "host": [ "{{baseUrl}}" ], "path": [ "api", "os-category-rules", "coverage" ] } } }, { "name": "POST /api/admin/os-categories — create new rule", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/os-category-rules", "host": [ "{{baseUrl}}" ], "path": [ "api", "os-category-rules" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "NOTE: Must be defined before /:id to avoid param collision", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/os-category-rules/preview", "host": [ "{{baseUrl}}" ], "path": [ "api", "os-category-rules", "preview" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "NOTE: Must be defined before /:id to avoid param collision", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/os-category-rules/reorder", "host": [ "{{baseUrl}}" ], "path": [ "api", "os-category-rules", "reorder" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /api/admin/os-categories/backfill — re-categorize all rows", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/os-category-rules/backfill", "host": [ "{{baseUrl}}" ], "path": [ "api", "os-category-rules", "backfill" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /api/admin/os-categories/:id — update rule", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/os-category-rules/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "os-category-rules", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /api/admin/os-categories/:id — delete rule", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/os-category-rules/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "os-category-rules", ":id" ] } } } ] }, { "name": "Progress", "description": "1 endpoints from progress.routes.ts", "item": [ { "name": "SSE Endpoint for real-time progress updates (requires authentication)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/progress/stream", "host": [ "{{baseUrl}}" ], "path": [ "api", "progress", "stream" ] } } } ] }, { "name": "Proxy", "description": "6 endpoints from proxy.routes.ts", "item": [ { "name": "POST /api/proxy/config-public", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/proxy/config-public", "host": [ "{{baseUrl}}" ], "path": [ "api", "proxy", "config-public" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "── GET /config — Return current proxy config (password masked) ──────────────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/proxy/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "proxy", "config" ] } } }, { "name": "── POST /config — Save proxy config (encrypts password) ─────────────────────", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/proxy/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "proxy", "config" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "── POST /test — Test proxy connectivity ─────────────────────────────────────", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/proxy/test", "host": [ "{{baseUrl}}" ], "path": [ "api", "proxy", "test" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "── DELETE /config — Disable proxy ───────────────────────────────────────────", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/proxy/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "proxy", "config" ] } } }, { "name": "── GET /diagnostics — Test connectivity to key services through proxy ───────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/proxy/diagnostics", "host": [ "{{baseUrl}}" ], "path": [ "api", "proxy", "diagnostics" ] } } } ] }, { "name": "Reconciliation", "description": "3 endpoints from reconciliation.routes.ts", "item": [ { "name": "Get current local database counts", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/reconciliation/counts", "host": [ "{{baseUrl}}" ], "path": [ "api", "reconciliation", "counts" ] } } }, { "name": "Compare local counts with expected Tenable total", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/reconciliation/compare", "host": [ "{{baseUrl}}" ], "path": [ "api", "reconciliation", "compare" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Quick health check against a known baseline", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/reconciliation/health/:expectedTotal", "host": [ "{{baseUrl}}" ], "path": [ "api", "reconciliation", "health", ":expectedTotal" ] } } } ] }, { "name": "Reports", "description": "6 endpoints from reports.routes.ts", "item": [ { "name": "List the current user's scheduled reports", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/reports/scheduled", "host": [ "{{baseUrl}}" ], "path": [ "api", "reports", "scheduled" ] } } }, { "name": "Create a new scheduled report", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/reports/scheduled", "host": [ "{{baseUrl}}" ], "path": [ "api", "reports", "scheduled" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Update a scheduled report", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/reports/scheduled/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "reports", "scheduled", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Delete a scheduled report", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/reports/scheduled/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "reports", "scheduled", ":id" ] } } }, { "name": "Trigger immediate execution of a scheduled report", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/reports/scheduled/:id/run-now", "host": [ "{{baseUrl}}" ], "path": [ "api", "reports", "scheduled", ":id", "run-now" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Generate a report on demand (not scheduled)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/reports/generate", "host": [ "{{baseUrl}}" ], "path": [ "api", "reports", "generate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "Saved Filters", "description": "4 endpoints from savedFilters.routes.ts", "item": [ { "name": "List all saved filters for the authenticated user on a given page", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/saved-filters", "host": [ "{{baseUrl}}" ], "path": [ "api", "saved-filters" ] } } }, { "name": "Create a new saved filter for the authenticated user", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/saved-filters", "host": [ "{{baseUrl}}" ], "path": [ "api", "saved-filters" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Update an existing saved filter (rename, change data, toggle default)", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/saved-filters/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "saved-filters", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Delete a saved filter (owner-scoped)", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/saved-filters/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "saved-filters", ":id" ] } } } ] }, { "name": "SBOM", "description": "7 endpoints from sbom.routes.ts", "item": [ { "name": "─── POST /import — Upload and parse SBOM ────────────────────────", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sbom/import", "host": [ "{{baseUrl}}" ], "path": [ "api", "sbom", "import" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "─── GET /components — List all components (paginated) ───────────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sbom/components", "host": [ "{{baseUrl}}" ], "path": [ "api", "sbom", "components" ] } } }, { "name": "─── GET /components/:id — Component detail ──────────────────────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sbom/components/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "sbom", "components", ":id" ] } } }, { "name": "─── GET /components/:id/assets — Assets with this component ────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sbom/components/:id/assets", "host": [ "{{baseUrl}}" ], "path": [ "api", "sbom", "components", ":id", "assets" ] } } }, { "name": "─── GET /assets/:uuid/components — Components on an asset ──────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sbom/assets/:uuid/components", "host": [ "{{baseUrl}}" ], "path": [ "api", "sbom", "assets", ":uuid", "components" ] } } }, { "name": "─── GET /import-history — Import log ────────────────────────────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sbom/import-history", "host": [ "{{baseUrl}}" ], "path": [ "api", "sbom", "import-history" ] } } }, { "name": "─── GET /dashboard — Stats overview ─────────────────────────────", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sbom/dashboard", "host": [ "{{baseUrl}}" ], "path": [ "api", "sbom", "dashboard" ] } } } ] }, { "name": "Scans", "description": "143 endpoints from scan.routes.ts", "item": [ { "name": "GET /templates — List all templates (filter by category)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/templates", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "templates" ] } } }, { "name": "GET /templates/:id — Get template detail", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/templates/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "templates", ":id" ] } } }, { "name": "POST /templates — Create custom template", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/templates", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "templates" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /templates/:id/clone — Clone a template", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/templates/:id/clone", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "templates", ":id", "clone" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /templates/:id — Update a custom template", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/templates/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "templates", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /templates/:id — Delete a custom template", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/templates/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "templates", ":id" ] } } }, { "name": "GET /runs/:runId/export — Export scan results (CSV, JSON, HTML, executive)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/runs/:runId/export", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "runs", ":runId", "export" ] } } }, { "name": "GET /runs/:runId/delta/:compareRunId — Delta report between two scan runs", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/runs/:runId/delta/:compareRunId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "runs", ":runId", "delta", ":compareRunId" ] } } }, { "name": "POST /api/scan/reports/schedule", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/reports/schedule", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "reports", "schedule" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /reports/scheduled — List all scheduled reports (DB-persisted)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/reports/scheduled", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "reports", "scheduled" ] } } }, { "name": "DELETE /reports/schedule/:scheduleId — Cancel a scheduled report (DB-persisted)", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/reports/schedule/:scheduleId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "reports", "schedule", ":scheduleId" ] } } }, { "name": "POST / — Create a new scan", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET / — List scans (filter: folderId, status, scanEngine, search, pagination)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan" ] } } }, { "name": "GET /folders — List folders with scan counts per folder", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/folders", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "folders" ] } } }, { "name": "POST /folders — Create custom folder", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/folders", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "folders" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /folders/:id — Rename folder", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/folders/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "folders", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "C10: PUT /folders/:id/move — Reparent a folder (move to new parent)", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/folders/:id/move", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "folders", ":id", "move" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /runs/:runId/summary — Severity summary + charts data (cached for completed scans)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/runs/:runId/summary", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "runs", ":runId", "summary" ] } } }, { "name": "GET /runs/:runId/hosts — List hosts from scan run (pagination)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/runs/:runId/hosts", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "runs", ":runId", "hosts" ] } } }, { "name": "GET /runs/:runId/hosts/:hostId — Host detail with findings", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/runs/:runId/hosts/:hostId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "runs", ":runId", "hosts", ":hostId" ] } } }, { "name": "GET /runs/:runId/findings — All findings (paginated, filterable, cached for completed scans)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/runs/:runId/findings", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "runs", ":runId", "findings" ] } } }, { "name": "GET /runs/:runId/remediations — Grouped by solution", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/runs/:runId/remediations", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "runs", ":runId", "remediations" ] } } }, { "name": "POST /seed-templates — Seed built-in templates (admin only, idempotent)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/seed-templates", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "seed-templates" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /schedules — List all scan schedules", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/schedules", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "schedules" ] } } }, { "name": "POST /schedules — Create a scan schedule", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/schedules", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "schedules" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /schedules/:id — Update a scan schedule", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/schedules/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "schedules", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /schedules/:id — Delete a scan schedule", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/schedules/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "schedules", ":id" ] } } }, { "name": "GET /blackout-windows — List all blackout windows", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/blackout-windows", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "blackout-windows" ] } } }, { "name": "POST /blackout-windows — Create a blackout window", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/blackout-windows", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "blackout-windows" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /blackout-windows/:id — Update a blackout window", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/blackout-windows/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "blackout-windows", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /blackout-windows/:id — Delete a blackout window", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/blackout-windows/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "blackout-windows", ":id" ] } } }, { "name": "GET /policies — List all scan policies (paginated)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/policies", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "policies" ] } } }, { "name": "GET /policies/:policyId — Get single policy by ID", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/policies/:policyId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "policies", ":policyId" ] } } }, { "name": "POST /policies — Create a new scan policy", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/policies", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "policies" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /policies/validate-check — Validate a custom check definition", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/policies/validate-check", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "policies", "validate-check" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /policies/:policyId — Update a scan policy", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/policies/:policyId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "policies", ":policyId" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /policies/:policyId/severity-overrides — Batch update severity overrides", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/policies/:policyId/severity-overrides", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "policies", ":policyId", "severity-overrides" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /policies/:policyId — Delete a scan policy", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/policies/:policyId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "policies", ":policyId" ] } } }, { "name": "GET /check-families — List all check families", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/check-families", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "check-families" ] } } }, { "name": "GET /check-families/:familyId/checks — List checks for a family", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/check-families/:familyId/checks", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "check-families", ":familyId", "checks" ] } } }, { "name": "GET /target-groups — List all target groups (paginated)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/target-groups", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "target-groups" ] } } }, { "name": "GET /target-groups/:groupId — Get single target group", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/target-groups/:groupId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "target-groups", ":groupId" ] } } }, { "name": "POST /target-groups — Create a target group", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/target-groups", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "target-groups" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /target-groups/:groupId/resolve — Resolve targets for a group", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/target-groups/:groupId/resolve", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "target-groups", ":groupId", "resolve" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /target-groups/:groupId — Update a target group", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/target-groups/:groupId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "target-groups", ":groupId" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /target-groups/:groupId — Delete a target group", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/target-groups/:groupId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "target-groups", ":groupId" ] } } }, { "name": "GET /credentials — List all credentials (masked)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/credentials", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "credentials" ] } } }, { "name": "GET /credentials/:id — Get credential detail (masked)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/credentials/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "credentials", ":id" ] } } }, { "name": "POST /credentials — Create credential (encrypt sensitive fields)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/credentials", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "credentials" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /credentials/:id — Update credential", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/credentials/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "credentials", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /credentials/:id — Delete credential", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/credentials/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "credentials", ":id" ] } } }, { "name": "POST /credentials/:id/test — Test credential connectivity (simulated, 10s timeout)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/credentials/:id/test", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "credentials", ":id", "test" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /trash/restore/:id — Restore a scan from trash", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/trash/restore/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "trash", "restore", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /trash/:id — Permanently delete a scan and all its runs/hosts/findings", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/trash/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "trash", ":id" ] } } }, { "name": "POST /trash/purge — Permanently delete all scans in trash older than 30 days (admin only)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/trash/purge", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "trash", "purge" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /progress/:id — Lightweight polling endpoint for scan progress", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/progress/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "progress", ":id" ] } } }, { "name": "GET /:id — Get scan detail (UUID only — let non-UUID paths fall through to later routes)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/:id([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", ":id([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})" ] } } }, { "name": "PUT /:id — Update scan config", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/:id([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", ":id([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /:id — Soft delete (move to trash folder)", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/:id([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", ":id([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})" ] } } }, { "name": "POST /:id/launch — Launch scan", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/:id/launch", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", ":id", "launch" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /:id/stop — Stop scan", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/:id/stop", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", ":id", "stop" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /:id/clone — Clone scan", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/:id/clone", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", ":id", "clone" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /:id/pause — Pause running scan", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/:id/pause", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", ":id", "pause" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /:id/resume — Resume paused scan", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/:id/resume", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", ":id", "resume" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /:id/runs — List scan run history", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/:id/runs", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", ":id", "runs" ] } } }, { "name": "POST /external/trigger — Launch a scan on an external scanner (Tenable or Qualys)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/external/trigger", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "external", "trigger" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /external/connectors — List available external scanner connectors", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/external/connectors", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "external", "connectors" ] } } }, { "name": "POST /recommend-template — AI-recommended scan templates for given targets", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/recommend-template", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "recommend-template" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /bulk — Perform bulk operations on multiple scans", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/bulk", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "bulk" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /compare/:runId1/:runId2 — Side-by-side comparison of two scan runs", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/compare/:runId1/:runId2", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "compare", ":runId1", ":runId2" ] } } }, { "name": "GET /feature-status — Return current feature flag and permission status (P6.12)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/feature-status", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "feature-status" ] } } }, { "name": "GET /trends/severity — Severity trend over time (daily aggregation)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/trends/severity", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "trends", "severity" ] } } }, { "name": "GET /trends/mttr — Mean Time To Remediate by severity", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/trends/mttr", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "trends", "mttr" ] } } }, { "name": "GET /trends/age-distribution — Vulnerability age distribution", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/trends/age-distribution", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "trends", "age-distribution" ] } } }, { "name": "GET /trends/new-vs-recurring — New vs recurring findings per scan", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/trends/new-vs-recurring", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "trends", "new-vs-recurring" ] } } }, { "name": "GET /trends/coverage — Scan coverage statistics", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/trends/coverage", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "trends", "coverage" ] } } }, { "name": "GET /trends/risk-score — Organization risk score trend", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/trends/risk-score", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "trends", "risk-score" ] } } }, { "name": "GET /trends/calendar — Scan frequency calendar data (for heatmap)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/trends/calendar", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "trends", "calendar" ] } } }, { "name": "POST /findings/:findingId/feedback — Submit analyst feedback (persisted to ScanFinding entity)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/findings/:findingId/feedback", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "findings", ":findingId", "feedback" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /findings/fp-stats — Get false positive statistics (from DB)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/findings/fp-stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "findings", "fp-stats" ] } } }, { "name": "GET /events/stream — SSE stream for ALL scan events", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/events/stream", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "events", "stream" ] } } }, { "name": "GET /events/stream/:scanId — SSE stream for a specific scan", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/events/stream/:scanId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "events", "stream", ":scanId" ] } } }, { "name": "GET /notifications — List notifications for current user (paginated, unread first)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/notifications", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "notifications" ] } } }, { "name": "GET /notifications/unread-count — Get unread count for current user", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/notifications/unread-count", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "notifications", "unread-count" ] } } }, { "name": "PUT /notifications/:id/read — Mark a single notification as read", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/notifications/:id/read", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "notifications", ":id", "read" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /notifications/read-all — Mark all notifications as read for current user", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/notifications/read-all", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "notifications", "read-all" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /runs/:runId/clusters?groupBy=root_cause|remediation|system|risk_theme", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/runs/:runId/clusters", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "runs", ":runId", "clusters" ] } } }, { "name": "GET /runs/:runId/priority-queue?top=5", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/runs/:runId/priority-queue", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "runs", ":runId", "priority-queue" ] } } }, { "name": "GET /patch-impact/:cveId — Single CVE patch impact analysis", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/patch-impact/:cveId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "patch-impact", ":cveId" ] } } }, { "name": "POST /patch-impact/bulk — Bulk CVE patch impact analysis", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/patch-impact/bulk", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "patch-impact", "bulk" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /exclusions — List exclusions (filter by scope, active)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/exclusions", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "exclusions" ] } } }, { "name": "POST /exclusions — Create exclusion (requires reason)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/exclusions", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "exclusions" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /exclusions/:id — Update exclusion", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/exclusions/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "exclusions", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /exclusions/:id — Delete exclusion", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/exclusions/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "exclusions", ":id" ] } } }, { "name": "GET /exclusions/audit — List exclusion change audit trail", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/exclusions/audit", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "exclusions", "audit" ] } } }, { "name": "GET /chains — List scan chains", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/chains", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "chains" ] } } }, { "name": "POST /chains — Create chain", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/chains", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "chains" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /chains/:id — Update chain", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/chains/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "chains", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /chains/:id — Delete chain", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/chains/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "chains", ":id" ] } } }, { "name": "GET /plugins — Search plugins by name, family, severity, CVE", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/plugins", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "plugins" ] } } }, { "name": "GET /plugins/:pluginId — Get full details for a specific plugin", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/plugins/:pluginId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "plugins", ":pluginId" ] } } }, { "name": "POST /ticketing/finding — Create a ticket from a single scan finding", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/ticketing/finding", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "ticketing", "finding" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /ticketing/bulk — Bulk create tickets from multiple findings", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/ticketing/bulk", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "ticketing", "bulk" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /integrations/webhook/test — Test a webhook URL", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/integrations/webhook/test", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "integrations", "webhook", "test" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/scan/integrations/webhook/config", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/integrations/webhook/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "integrations", "webhook", "config" ] } } }, { "name": "POST /integrations/webhook/config — Save webhook config", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/integrations/webhook/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "integrations", "webhook", "config" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /integrations/webhook/config/:id — Update webhook config", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/integrations/webhook/config/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "integrations", "webhook", "config", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /integrations/webhook/config/:id — Delete webhook config", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/integrations/webhook/config/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "integrations", "webhook", "config", ":id" ] } } }, { "name": "POST /integrations/webhook/:id/test — Test a specific saved webhook", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/integrations/webhook/:id/test", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "integrations", "webhook", ":id", "test" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /integrations/webhook/:id/deliveries — Get delivery history for a webhook", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/integrations/webhook/:id/deliveries", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "integrations", "webhook", ":id", "deliveries" ] } } }, { "name": "GET /integrations/config/:type — Get integration config", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/integrations/config/:type", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "integrations", "config", ":type" ] } } }, { "name": "PUT /integrations/config/:type — Save integration config", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/integrations/config/:type", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "integrations", "config", ":type" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /integrations/config/:type/test — Test integration connection", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/integrations/config/:type/test", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "integrations", "config", ":type", "test" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /ci/trigger — Trigger a scan via API key (CI/CD pipeline)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/ci/trigger", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "ci", "trigger" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /ci/gate/:runId — Check scan gate pass/fail", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/ci/gate/:runId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "ci", "gate", ":runId" ] } } }, { "name": "GET /ci/gate/config — Get gate threshold configuration (from DB)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/ci/gate/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "ci", "gate", "config" ] } } }, { "name": "POST /ci/gate/config — Set gate threshold configuration (persisted to DB)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/ci/gate/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "ci", "gate", "config" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /integrations/cicd/config — Save CI/CD configuration from dashboard", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/integrations/cicd/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "integrations", "cicd", "config" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /integrations/cicd/config — Load CI/CD configuration for dashboard", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/integrations/cicd/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "integrations", "cicd", "config" ] } } }, { "name": "GET /notification-preferences — Load user's notification preferences", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/notification-preferences", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "notification-preferences" ] } } }, { "name": "PUT /notification-preferences — Save notification preferences", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/notification-preferences", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "notification-preferences" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /integrations/ticketing/config — Load ticketing config", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/integrations/ticketing/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "integrations", "ticketing", "config" ] } } }, { "name": "POST /integrations/ticketing/config — Save ticketing config", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/integrations/ticketing/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "integrations", "ticketing", "config" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /sla/stats/:runId — SLA stats for a scan run", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/sla/stats/:runId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "sla", "stats", ":runId" ] } } }, { "name": "GET /sla/compliance — Org-wide SLA compliance", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/sla/compliance", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "sla", "compliance" ] } } }, { "name": "GET /sla/breached — List SLA-breached findings (paginated)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/sla/breached", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "sla", "breached" ] } } }, { "name": "GET /sla/config — Get SLA configuration", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/sla/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "sla", "config" ] } } }, { "name": "PUT /sla/config — Update SLA configuration", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/sla/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "sla", "config" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /assets/:assetId/criticality — Set asset criticality", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/assets/:assetId/criticality", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "assets", ":assetId", "criticality" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /assets/criticality — List all asset criticality assignments", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/assets/criticality", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "assets", "criticality" ] } } }, { "name": "GET /assets/:assetId/criticality — Get single asset criticality", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/assets/:assetId/criticality", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "assets", ":assetId", "criticality" ] } } }, { "name": "POST /notifications/email/send — Send a scan notification email via SMTP", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/notifications/email/send", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "notifications", "email", "send" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /scans/:id/optimize — AI-powered scan optimization suggestions", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/scans/:id/optimize", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "scans", ":id", "optimize" ] } } }, { "name": "GET /integrations/siem/export/:runId — Export findings as CEF or syslog", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/integrations/siem/export/:runId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "integrations", "siem", "export", ":runId" ] } } }, { "name": "GET /audit-log — Get recent audit log entries across all scans", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/audit-log", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "audit-log" ] } } }, { "name": "GET /audit-log/:scanId — Get audit log for a specific scan", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/audit-log/:scanId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "audit-log", ":scanId" ] } } }, { "name": "GET /findings/:findingId/audit — Get audit log for a specific finding (7.3.2)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/findings/:findingId/audit", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "findings", ":findingId", "audit" ] } } }, { "name": "POST /findings/:findingId/status — Change finding status with audit trail (7.3.2)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/findings/:findingId/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "findings", ":findingId", "status" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /findings/:findingId/validate — Safe exploit validation for a single finding", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/findings/:findingId/validate", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "findings", ":findingId", "validate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /findings/validate/batch — Batch validate multiple findings", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/findings/validate/batch", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "findings", "validate", "batch" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /external/tenable/launch — Launch a scan on Tenable.io", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/external/tenable/launch", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "external", "tenable", "launch" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /external/qualys/launch — Launch a scan on Qualys", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/external/qualys/launch", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "external", "qualys", "launch" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /weaver-score/recompute — Recompute WeaverScores for all or specific scan findings", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan/weaver-score/recompute", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan", "weaver-score", "recompute" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "Scan Agents", "description": "9 endpoints from scanAgent.routes.ts", "item": [ { "name": "Fleet-level summary statistics. Placed before /:id to avoid route collision.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan-agents/stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan-agents", "stats" ] } } }, { "name": "- page / limit: pagination", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan-agents", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan-agents" ] } } }, { "name": "List all enrollment tokens (masked). Placed before /:id to avoid collision.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan-agents/enrollment-tokens/list", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan-agents", "enrollment-tokens", "list" ] } } }, { "name": "Create a new agent enrollment token.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan-agents/enrollment-tokens", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan-agents", "enrollment-tokens" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Revoke (deactivate) an enrollment token.", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan-agents/enrollment-tokens/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan-agents", "enrollment-tokens", ":id" ] } } }, { "name": "Get a single agent's details including recent tasks.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan-agents/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan-agents", ":id" ] } } }, { "name": "Decommission an agent — disconnect the live WebSocket and mark as decommissioned.", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan-agents/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan-agents", ":id" ] } } }, { "name": "Fetch recent tasks assigned to a specific agent.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan-agents/:id/tasks", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan-agents", ":id", "tasks" ] } } }, { "name": "network zones).", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scan-agents/:id/tasks", "host": [ "{{baseUrl}}" ], "path": [ "api", "scan-agents", ":id", "tasks" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "Scanners", "description": "168 endpoints from scanner.routes.ts", "item": [ { "name": "POST /gateway/register — Agent self-registration (requires enrollment token)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/gateway/register", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "gateway", "register" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /gateway/heartbeat — Agent heartbeat", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/gateway/heartbeat", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "gateway", "heartbeat" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /gateway/sbom — Submit SBOM data", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/gateway/sbom", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "gateway", "sbom" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /gateway/scan-results — Submit scan results", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/gateway/scan-results", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "gateway", "scan-results" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /gateway/commands/:agentId — Get pending commands for agent", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/gateway/commands/:agentId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "gateway", "commands", ":agentId" ] } } }, { "name": "GET /gateway/intel-db/updates — Get intelligence DB updates since timestamp", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/gateway/intel-db/updates", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "gateway", "intel-db", "updates" ] } } }, { "name": "POST /gateway/verify-cert — Agent verifies its certificate is still valid", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/gateway/verify-cert", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "gateway", "verify-cert" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /gateway/renew-cert — Agent renews its certificate before expiry", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/gateway/renew-cert", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "gateway", "renew-cert" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /gateway/ca-cert — Return the CA public certificate for agents to pin", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/gateway/ca-cert", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "gateway", "ca-cert" ] } } }, { "name": "GET /gateway/update-manifest — Agent checks for available updates", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/gateway/update-manifest", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "gateway", "update-manifest" ] } } }, { "name": "POST /gateway/fim-events — Agent submits FIM events (Phase 12)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/gateway/fim-events", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "gateway", "fim-events" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/scanners/gateway/download-image", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/gateway/download-image", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "gateway", "download-image" ] } } }, { "name": "GET /adapters — list available adapter types", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/adapters", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "adapters" ] } } }, { "name": "GET /connectors/health — get health status for all configured connectors", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/connectors/health", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "connectors", "health" ] } } }, { "name": "POST /connectors/health/check-all — trigger health check for all active connectors", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/connectors/health/check-all", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "connectors", "health", "check-all" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /connectors/:id/sync-history — Get sync history for a specific connector", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/connectors/:id/sync-history", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "connectors", ":id", "sync-history" ] } } }, { "name": "GET /connectors/sync-history — Get sync history for ALL connectors", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/connectors/sync-history", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "connectors", "sync-history" ] } } }, { "name": "POST /connectors/:id/test — test a specific connector's connection and update health", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/connectors/:id/test", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "connectors", ":id", "test" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /agents — List all agents (with filters)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/agents", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "agents" ] } } }, { "name": "GET /agents/fleet-stats — Get fleet statistics", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/agents/fleet-stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "agents", "fleet-stats" ] } } }, { "name": "GET /agents/:id — Get single agent detail", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/agents/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "agents", ":id" ] } } }, { "name": "POST /agents/:id/ping — Measure WebSocket round-trip latency to sensor", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/agents/:id/ping", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "agents", ":id", "ping" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PATCH /agents/:id — Rename an agent", "request": { "method": "PATCH", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/agents/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "agents", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /agents/:id/decommission — Decommission an agent", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/agents/:id/decommission", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "agents", ":id", "decommission" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /agents/:id — Permanently delete a decommissioned agent from the database", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/agents/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "agents", ":id" ] } } }, { "name": "GET /agents/:id/access-key — Retrieve decrypted access key for a sensor agent", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/agents/:id/access-key", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "agents", ":id", "access-key" ] } } }, { "name": "POST /agents/:id/regenerate-access-key — Generate new access key and push to sensor", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/agents/:id/regenerate-access-key", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "agents", ":id", "regenerate-access-key" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /agents/:id/rotate-key — Rotate mTLS key for a sensor agent", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/agents/:id/rotate-key", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "agents", ":id", "rotate-key" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /agents/:id/config — Update agent config (scan interval, tags)", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/agents/:id/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "agents", ":id", "config" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /agents/:id/scan — Trigger an on-demand scan for a specific agent", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/agents/:id/scan", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "agents", ":id", "scan" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /agents/:id/test-connectivity — Test if a sensor agent can reach a target URL", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/agents/:id/test-connectivity", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "agents", ":id", "test-connectivity" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Returns an error directing callers to use the sensor-mediated test-connectivity endpoint instead.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/agents/test-connectivity-direct", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "agents", "test-connectivity-direct" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /agents/scan-all — Trigger scan on all active agents", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/agents/scan-all", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "agents", "scan-all" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /enrollment-tokens — List all enrollment tokens", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/enrollment-tokens", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "enrollment-tokens" ] } } }, { "name": "POST /enrollment-tokens — Create new enrollment token", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/enrollment-tokens", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "enrollment-tokens" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "MUST be before /:id to avoid Express matching 'permanent' as the :id param", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/enrollment-tokens/:id/permanent", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "enrollment-tokens", ":id", "permanent" ] } } }, { "name": "DELETE /enrollment-tokens/:id — Revoke (deactivate) an enrollment token", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/enrollment-tokens/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "enrollment-tokens", ":id" ] } } }, { "name": "GET /sbom/:agentId — List SBOM snapshots for agent", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/sbom/:agentId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "sbom", ":agentId" ] } } }, { "name": "GET /sbom/:agentId/latest — Get latest SBOM for agent", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/sbom/:agentId/latest", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "sbom", ":agentId", "latest" ] } } }, { "name": "GET /sbom/:agentId/drift — List drift events for agent", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/sbom/:agentId/drift", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "sbom", ":agentId", "drift" ] } } }, { "name": "POST /sbom/:agentId/drift/:id/acknowledge — Acknowledge a drift event", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/sbom/:agentId/drift/:id/acknowledge", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "sbom", ":agentId", "drift", ":id", "acknowledge" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /intel/sync — Trigger intelligence sync (all sources or specific)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/intel/sync", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "intel", "sync" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /intel/sync-status — Get recent sync logs", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/intel/sync-status", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "intel", "sync-status" ] } } }, { "name": "GET /intel/signatures — List detection signatures (with filters)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/intel/signatures", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "intel", "signatures" ] } } }, { "name": "PUT /intel/signatures/:id/review — Approve/reject AI-generated signature", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/intel/signatures/:id/review", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "intel", "signatures", ":id", "review" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /intel/stats — Intelligence DB statistics", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/intel/stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "intel", "stats" ] } } }, { "name": "GET /scan-results/:agentId — List scan results for agent", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/scan-results/:agentId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "scan-results", ":agentId" ] } } }, { "name": "GET /scan-results/:agentId/latest — Get latest scan result", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/scan-results/:agentId/latest", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "scan-results", ":agentId", "latest" ] } } }, { "name": "GET /remediation — List remediation jobs (with filters)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/remediation", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "remediation" ] } } }, { "name": "POST /remediation — Create remediation job", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/remediation", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "remediation" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /remediation/:id/approve — Approve remediation job", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/remediation/:id/approve", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "remediation", ":id", "approve" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /remediation/:id/cancel — Cancel remediation job", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/remediation/:id/cancel", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "remediation", ":id", "cancel" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /remediation/:id/reject — Reject remediation job", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/remediation/:id/reject", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "remediation", ":id", "reject" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /remediation/:id/execute — Execute remediation job", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/remediation/:id/execute", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "remediation", ":id", "execute" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /remediation/:id/complete — Complete remediation job (called by agent or admin)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/remediation/:id/complete", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "remediation", ":id", "complete" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /remediation/:id/rollback — Rollback remediation job", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/remediation/:id/rollback", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "remediation", ":id", "rollback" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /false-positives — List false positive patterns", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/false-positives", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "false-positives" ] } } }, { "name": "POST /false-positives — Create false positive pattern", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/false-positives", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "false-positives" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /false-positives/:id — Update pattern (activate/deactivate)", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/false-positives/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "false-positives", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /false-positives/:id — Delete pattern", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/false-positives/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "false-positives", ":id" ] } } }, { "name": "GET /ai-rules/review-queue — Get AI-generated rules pending review", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai-rules/review-queue", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai-rules", "review-queue" ] } } }, { "name": "POST /ai-rules/generate — Generate detection rules from CVE(s)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai-rules/generate", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai-rules", "generate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /ai-rules/:id/approve — Approve an AI-generated rule", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai-rules/:id/approve", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai-rules", ":id", "approve" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /ai-rules/:id/reject — Reject an AI-generated rule", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai-rules/:id/reject", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai-rules", ":id", "reject" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /confidence/feedback — Submit analyst feedback for a detection", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/confidence/feedback", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "confidence", "feedback" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /confidence/:signatureId — Get accuracy stats for a signature", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/confidence/:signatureId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "confidence", ":signatureId" ] } } }, { "name": "GET /mobile/devices — List mobile devices", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/mobile/devices", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "mobile", "devices" ] } } }, { "name": "GET /mobile/stats — Device stats", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/mobile/stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "mobile", "stats" ] } } }, { "name": "POST /mobile/devices — Register mobile device", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/mobile/devices", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "mobile", "devices" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /mobile/sync/:provider — Sync from MDM", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/mobile/sync/:provider", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "mobile", "sync", ":provider" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /mobile/devices/:id/compliance — Check device compliance", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/mobile/devices/:id/compliance", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "mobile", "devices", ":id", "compliance" ] } } }, { "name": "GET /mobile/vulnerabilities — Match mobile vulnerabilities (Apple + Android)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/mobile/vulnerabilities", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "mobile", "vulnerabilities" ] } } }, { "name": "GET /mobile/vulnerabilities/apple — Apple Security Updates matching only", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/mobile/vulnerabilities/apple", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "mobile", "vulnerabilities", "apple" ] } } }, { "name": "GET /mobile/vulnerabilities/android — Android Security Bulletins matching only", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/mobile/vulnerabilities/android", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "mobile", "vulnerabilities", "android" ] } } }, { "name": "GET /mobile/mdm/status — Check if MDM API is configured", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/mobile/mdm/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "mobile", "mdm", "status" ] } } }, { "name": "POST /mobile/mdm/enroll — Enroll device via Apple DEP", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/mobile/mdm/enroll", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "mobile", "mdm", "enroll" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /mobile/mdm/devices/:udid — Query device from MDM server", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/mobile/mdm/devices/:udid", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "mobile", "mdm", "devices", ":udid" ] } } }, { "name": "GET /mobile/mdm/devices/:udid/compliance — Check MDM compliance", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/mobile/mdm/devices/:udid/compliance", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "mobile", "mdm", "devices", ":udid", "compliance" ] } } }, { "name": "POST /mobile/mdm/sync — Sync all devices from MDM API", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/mobile/mdm/sync", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "mobile", "mdm", "sync" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /relays — List relays", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/relays", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "relays" ] } } }, { "name": "GET /relays/stats — Relay stats", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/relays/stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "relays", "stats" ] } } }, { "name": "GET /relays/topology — Relay topology tree", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/relays/topology", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "relays", "topology" ] } } }, { "name": "POST /relays — Register relay", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/relays", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "relays" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /relays/:id/heartbeat — Relay heartbeat", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/relays/:id/heartbeat", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "relays", ":id", "heartbeat" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /relays/:id — Decommission relay", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/relays/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "relays", ":id" ] } } }, { "name": "POST /relays/:id/export — Export air-gapped relay bundle", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/relays/:id/export", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "relays", ":id", "export" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /relays/import — Import air-gapped relay bundle", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/relays/import", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "relays", "import" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /relays/prepare-usb — Prepare USB transfer package for air-gapped relay", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/relays/prepare-usb", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "relays", "prepare-usb" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /relays/import-usb — Import USB transfer package", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/relays/import-usb", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "relays", "import-usb" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /relays/:id/split-tunnel — Update split-tunnel configuration", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/relays/:id/split-tunnel", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "relays", ":id", "split-tunnel" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /relays/:id/split-tunnel — Get current split-tunnel configuration", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/relays/:id/split-tunnel", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "relays", ":id", "split-tunnel" ] } } }, { "name": "GET /containers — List containers", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/containers", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "containers" ] } } }, { "name": "GET /containers/stats — Container stats", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/containers/stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "containers", "stats" ] } } }, { "name": "GET /containers/vulnerable-images — Vulnerable images list", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/containers/vulnerable-images", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "containers", "vulnerable-images" ] } } }, { "name": "GET /containers/k8s-overview — Kubernetes overview", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/containers/k8s-overview", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "containers", "k8s-overview" ] } } }, { "name": "POST /containers — Register container", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/containers", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "containers" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /containers/admission-check — Check admission policy", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/containers/admission-check", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "containers", "admission-check" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "This receives AdmissionReview JSON from K8s and returns allow/deny", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/containers/admission-webhook", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "containers", "admission-webhook" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /kspm/scan — Trigger KSPM scan", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/kspm/scan", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "kspm", "scan" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /kspm/findings — List KSPM findings", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/kspm/findings", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "kspm", "findings" ] } } }, { "name": "GET /edr/events — List EDR events", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/edr/events", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "edr", "events" ] } } }, { "name": "GET /edr/stats — Event stats", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/edr/stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "edr", "stats" ] } } }, { "name": "GET /edr/anomalies — Anomaly events", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/edr/anomalies", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "edr", "anomalies" ] } } }, { "name": "POST /edr/events — Ingest single EDR event", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/edr/events", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "edr", "events" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /edr/events/batch — Batch ingest EDR events", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/edr/events/batch", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "edr", "events", "batch" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /edr/events/:id/acknowledge — Acknowledge event", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/edr/events/:id/acknowledge", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "edr", "events", ":id", "acknowledge" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /edr/fim-rules — List FIM rules", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/edr/fim-rules", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "edr", "fim-rules" ] } } }, { "name": "POST /edr/fim-rules — Create FIM rule", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/edr/fim-rules", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "edr", "fim-rules" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /edr/fim-rules/:id — Update FIM rule", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/edr/fim-rules/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "edr", "fim-rules", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /edr/fim-rules/:id — Delete FIM rule", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/edr/fim-rules/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "edr", "fim-rules", ":id" ] } } }, { "name": "GET /ai/predictive/high-risk-packages — High-risk packages ranked by score", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/predictive/high-risk-packages", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "predictive", "high-risk-packages" ] } } }, { "name": "GET /ai/predictive/predictions — Predicted vulnerabilities for next N days", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/predictive/predictions", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "predictive", "predictions" ] } } }, { "name": "GET /ai/predictive/rising-threats — Packages with increasing exploit interest", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/predictive/rising-threats", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "predictive", "rising-threats" ] } } }, { "name": "GET /ai/zero-day/alerts — Active zero-day alerts", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/zero-day/alerts", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "zero-day", "alerts" ] } } }, { "name": "GET /ai/zero-day/exposure/:cveId — Fleet exposure for a specific CVE", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/zero-day/exposure/:cveId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "zero-day", "exposure", ":cveId" ] } } }, { "name": "POST /ai/zero-day/dismiss/:alertId — Dismiss a zero-day alert", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/zero-day/dismiss/:alertId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "zero-day", "dismiss", ":alertId" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /ai/attack-paths — List active attack paths", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/attack-paths", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "attack-paths" ] } } }, { "name": "Express from matching 'graph' as a :id parameter.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/attack-paths/graph", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "attack-paths", "graph" ] } } }, { "name": "GET /ai/attack-paths/:id — Get single attack path", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/attack-paths/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "attack-paths", ":id" ] } } }, { "name": "POST /ai/attack-paths/compute — Trigger attack path computation", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/attack-paths/compute", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "attack-paths", "compute" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /ai/attack-paths/:id/mitigate — Mark attack path as mitigated", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/attack-paths/:id/mitigate", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "attack-paths", ":id", "mitigate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /ai/conflicts — Detect and list conflicts", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/conflicts", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "conflicts" ] } } }, { "name": "GET /ai/conflicts/stats — Conflict statistics", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/conflicts/stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "conflicts", "stats" ] } } }, { "name": "POST /ai/conflicts/:id/resolve — Resolve a conflict", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/conflicts/:id/resolve", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "conflicts", ":id", "resolve" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /ai/policies — List all policies", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/policies", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "policies" ] } } }, { "name": "POST /ai/policies — Create a new policy from natural language", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/policies", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "policies" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /ai/policies/:id/evaluate — Evaluate a specific policy", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/policies/:id/evaluate", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "policies", ":id", "evaluate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /ai/policies/:id — Delete a policy", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/policies/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "policies", ":id" ] } } }, { "name": "GET /ai/business-impact/high-impact — Highest business-impact vulnerabilities", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/business-impact/high-impact", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "business-impact", "high-impact" ] } } }, { "name": "GET /ai/business-impact/:vulnerabilityId — Business impact score for a vulnerability", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/business-impact/:vulnerabilityId", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "business-impact", ":vulnerabilityId" ] } } }, { "name": "GET /source-comparison — Compare vulnerability counts across scanner sources", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/source-comparison", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "source-comparison" ] } } }, { "name": "GET /compliance/attestations — List attestations for a client", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/compliance/attestations", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "compliance", "attestations" ] } } }, { "name": "POST /compliance/attestations/generate — Generate a new attestation", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/compliance/attestations/generate", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "compliance", "attestations", "generate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /compliance/attestations/:id — Get single attestation", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/compliance/attestations/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "compliance", "attestations", ":id" ] } } }, { "name": "POST /compliance/attestations/:id/attest — Human attestation", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/compliance/attestations/:id/attest", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "compliance", "attestations", ":id", "attest" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /compliance/attestations/:id/evidence/pdf — Export evidence as printable HTML report", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/compliance/attestations/:id/evidence/pdf", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "compliance", "attestations", ":id", "evidence", "pdf" ] } } }, { "name": "GET /compliance/attestations/:id/evidence — Export evidence package", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/compliance/attestations/:id/evidence", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "compliance", "attestations", ":id", "evidence" ] } } }, { "name": "GET /remediation/jobs — List remediation jobs with ?status and ?type filters", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/remediation/jobs", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "remediation", "jobs" ] } } }, { "name": "POST /remediation/jobs — Create remediation job (status='pending')", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/remediation/jobs", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "remediation", "jobs" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /remediation/jobs/:id/approve — Approve (pending → approved)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/remediation/jobs/:id/approve", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "remediation", "jobs", ":id", "approve" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /remediation/jobs/:id/reject — Reject (pending → rejected)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/remediation/jobs/:id/reject", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "remediation", "jobs", ":id", "reject" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /remediation/jobs/:id/execute — Execute (approved → executing)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/remediation/jobs/:id/execute", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "remediation", "jobs", ":id", "execute" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /remediation/jobs/:id/rollback — Rollback (executing|completed → rolled_back)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/remediation/jobs/:id/rollback", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "remediation", "jobs", ":id", "rollback" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /nlp-policies — List all NLP policies", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/nlp-policies", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "nlp-policies" ] } } }, { "name": "POST /nlp-policies — Create a new NLP policy", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/nlp-policies", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "nlp-policies" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /nlp-policies/:id — Update an NLP policy", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/nlp-policies/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "nlp-policies", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /nlp-policies/:id — Delete an NLP policy", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/nlp-policies/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "nlp-policies", ":id" ] } } }, { "name": "GET /conflicts — List conflicts with optional status filter", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/conflicts", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "conflicts" ] } } }, { "name": "POST /conflicts/:id/resolve — Resolve a conflict with action + notes", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/conflicts/:id/resolve", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "conflicts", ":id", "resolve" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /cmdb/import — Import CMDB asset criticality data (admin only)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/cmdb/import", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "cmdb", "import" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /cmdb/stats — Get CMDB import statistics", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/cmdb/stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "cmdb", "stats" ] } } }, { "name": "POST /edr/fim-events — Receive FIM events from agents (processed through EDR pipeline)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/edr/fim-events", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "edr", "fim-events" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /edr/fim-events — Query FIM-specific events (file_change type only)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/edr/fim-events", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "edr", "fim-events" ] } } }, { "name": "GET / — list configured scanners", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners" ] } } }, { "name": "GET /scanners/engine-providers — list all engines with status", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/engine-providers", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "engine-providers" ] } } }, { "name": "POST /scanners/engine-providers/:engine/test — probe a scanner's API", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/engine-providers/:engine/test", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "engine-providers", ":engine", "test" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /scanners/engine-providers/default — set the default scan engine", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/engine-providers/default", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "engine-providers", "default" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PUT /scanners/engine-providers/:engine/credentials — save API keys for an external engine", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/engine-providers/:engine/credentials", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "engine-providers", ":engine", "credentials" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /:slug — scanner detail + health", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/:slug", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", ":slug" ] } } }, { "name": "POST /:slug/test — test scanner connection", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/:slug/test", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", ":slug", "test" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /ai/nova/status — Get WeaverNova status and recent decisions", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/nova/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "nova", "status" ] } } }, { "name": "POST /ai/nova/evaluate — Trigger manual WeaverNova evaluation", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/nova/evaluate", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "nova", "evaluate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /ai/nova/decisions — List recent WeaverNova decisions", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/nova/decisions", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "nova", "decisions" ] } } }, { "name": "GET /ai/nova/reports — List recent WeaverNova evaluation reports", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/nova/reports", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "nova", "reports" ] } } }, { "name": "GET /ai/forecast — Predict which vulnerability categories are likely to be exploited", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/forecast", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "forecast" ] } } }, { "name": "GET /ai/rising-threats — Get trending CVE families", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/rising-threats", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "rising-threats" ] } } }, { "name": "GET /ai/digital-twin/model — Build infrastructure model from scan data", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/digital-twin/model", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "digital-twin", "model" ] } } }, { "name": "POST /ai/digital-twin/simulate — Simulate an attack path", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/scanners/ai/digital-twin/simulate", "host": [ "{{baseUrl}}" ], "path": [ "api", "scanners", "ai", "digital-twin", "simulate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "Security", "description": "14 endpoints from security.routes.ts", "item": [ { "name": "Get recent security audit logs with filtering", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/security/logs", "host": [ "{{baseUrl}}" ], "path": [ "api", "security", "logs" ] } } }, { "name": "Get security statistics for the specified time period", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/security/stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "security", "stats" ] } } }, { "name": "Get current security alerts based on thresholds", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/security/alerts", "host": [ "{{baseUrl}}" ], "path": [ "api", "security", "alerts" ] } } }, { "name": "Security monitoring health check", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/security/health", "host": [ "{{baseUrl}}" ], "path": [ "api", "security", "health" ] } } }, { "name": "List all blocked IPs (active + expired/unblocked for history)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/security/blocked-ips", "host": [ "{{baseUrl}}" ], "path": [ "api", "security", "blocked-ips" ] } } }, { "name": "Unblock a previously blocked IP", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/security/blocked-ips/:id/unblock", "host": [ "{{baseUrl}}" ], "path": [ "api", "security", "blocked-ips", ":id", "unblock" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Manually block an IP address", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/security/blocked-ips", "host": [ "{{baseUrl}}" ], "path": [ "api", "security", "blocked-ips" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "List all whitelisted IPs (active + history)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/security/whitelisted-ips", "host": [ "{{baseUrl}}" ], "path": [ "api", "security", "whitelisted-ips" ] } } }, { "name": "Add an IP to the whitelist. Auto-unblocks any active blacklist entry for the same IP.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/security/whitelisted-ips", "host": [ "{{baseUrl}}" ], "path": [ "api", "security", "whitelisted-ips" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Remove an IP from the whitelist", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/security/whitelisted-ips/:id/remove", "host": [ "{{baseUrl}}" ], "path": [ "api", "security", "whitelisted-ips", ":id", "remove" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Supports pagination via ?page=1&pageSize=50.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/security/auth-logs", "host": [ "{{baseUrl}}" ], "path": [ "api", "security", "auth-logs" ] } } }, { "name": "Query params: format=json|csv, startDate, endDate, eventType, severity, limit (max 50000)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/security/auth-logs/export", "host": [ "{{baseUrl}}" ], "path": [ "api", "security", "auth-logs", "export" ] } } }, { "name": "Future: accepts { bucket, region, prefix } and streams logs to S3.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/security/auth-logs/export/s3", "host": [ "{{baseUrl}}" ], "path": [ "api", "security", "auth-logs", "export", "s3" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Admin only. Rate limited to 1 call per hour per user.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/security/auth-logs/cleanup", "host": [ "{{baseUrl}}" ], "path": [ "api", "security", "auth-logs", "cleanup" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "Setup", "description": "3 endpoints from setup.routes.ts", "item": [ { "name": "and the normal license activation flow (LicenseActivation page) handles it.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/setup/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "setup", "status" ] } } }, { "name": "Returns the decoded claims if valid, or an error message.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/setup/validate-license", "host": [ "{{baseUrl}}" ], "path": [ "api", "setup", "validate-license" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "license service with the new key.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/setup/activate", "host": [ "{{baseUrl}}" ], "path": [ "api", "setup", "activate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "SSO", "description": "7 endpoints from sso.routes.ts", "item": [ { "name": "Security: always returns a neutral response — never reveals whether the email exists.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sso/resolve", "host": [ "{{baseUrl}}" ], "path": [ "api", "sso", "resolve" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Returns minimal SSO availability info for the login screen.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sso/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "sso", "status" ] } } }, { "name": "cleartext — only a boolean `secretSet` indicating whether one is stored.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sso/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "sso", "config" ] } } }, { "name": "If clientSecret is empty/null/undefined, the existing encrypted secret is preserved.", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sso/config", "host": [ "{{baseUrl}}" ], "path": [ "api", "sso", "config" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "discovery document and (optionally) performing a client_credentials grant.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sso/test", "host": [ "{{baseUrl}}" ], "path": [ "api", "sso", "test" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "the browser to the Microsoft authorization endpoint.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sso/authorize", "host": [ "{{baseUrl}}" ], "path": [ "api", "sso", "authorize" ] } } }, { "name": "9. Redirect to frontend", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sso/callback", "host": [ "{{baseUrl}}" ], "path": [ "api", "sso", "callback" ] } } } ] }, { "name": "Sync", "description": "18 endpoints from sync.routes.ts", "item": [ { "name": "GET /api/sync/status - Get current sync status (any authenticated user)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/status", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", "status" ] } } }, { "name": "POST /api/sync/start - Start a new sync (admin only)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/start", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", "start" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /api/sync/cancel/:syncId - Cancel a running sync (admin only)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/cancel/:syncId", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", "cancel", ":syncId" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /api/sync/aggregate - Manually trigger aggregation (admin only)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/aggregate", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", "aggregate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /api/sync/backfill - Manually trigger historical backfill (admin only)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/backfill", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", "backfill" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /api/sync/rebuild-trends - Complete rebuild of trend data using correct logic (admin only)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/rebuild-trends", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", "rebuild-trends" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/sync/history - Get sync job history (any authenticated user)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/history", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", "history" ] } } }, { "name": "GET /api/sync/frequency - Get sync frequency (any authenticated user)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/frequency", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", "frequency" ] } } }, { "name": "PUT /api/sync/frequency - Set sync frequency (admin only)", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/frequency", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", "frequency" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/sync/audit-log - Get API audit logs (any authenticated user)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/audit-log", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", "audit-log" ] } } }, { "name": "GET /api/sync/audit-log/:syncId - Get audit logs for a specific sync (any authenticated user)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/audit-log/:syncId", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", "audit-log", ":syncId" ] } } }, { "name": "GET /api/sync/stats - Get API call statistics (any authenticated user)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", "stats" ] } } }, { "name": "GET /api/sync/health - Get comprehensive sync health metrics (any authenticated user)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/health", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", "health" ] } } }, { "name": "GET /api/sync/interrupted - Get list of interrupted syncs (admin only)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/interrupted", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", "interrupted" ] } } }, { "name": "POST /api/sync/:id/resume - Resume an interrupted sync (admin only)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/:id/resume", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", ":id", "resume" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /api/sync/integrity-check - Get data integrity status (admin only)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/integrity-check", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", "integrity-check" ] } } }, { "name": "POST /api/sync/integrity-backfill - Manually trigger smart backfill (admin only)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/integrity-backfill", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", "integrity-backfill" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /api/sync/:id/discard - Discard an interrupted sync (admin only)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/sync/:id/discard", "host": [ "{{baseUrl}}" ], "path": [ "api", "sync", ":id", "discard" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "Tags", "description": "10 endpoints from tags.routes.ts", "item": [ { "name": "Response: { tags: [{ key, value, count }] }", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/tags/tenable", "host": [ "{{baseUrl}}" ], "path": [ "api", "tags", "tenable" ] } } }, { "name": "Response: { keys: [{ key, count }] }", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/tags/tenable/keys", "host": [ "{{baseUrl}}" ], "path": [ "api", "tags", "tenable", "keys" ] } } }, { "name": "Response: { uuids: string[], total: number }", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/tags/tenable/assets", "host": [ "{{baseUrl}}" ], "path": [ "api", "tags", "tenable", "assets" ] } } }, { "name": "Response: { tags: AssetTag[] }", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/tags", "host": [ "{{baseUrl}}" ], "path": [ "api", "tags" ] } } }, { "name": "Body: { key, value, color?, description?, assetUuids? }", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/tags", "host": [ "{{baseUrl}}" ], "path": [ "api", "tags" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Body: { key?, value?, color?, description?, assetUuids? }", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/tags/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "tags", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Delete a custom tag.", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/tags/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "tags", ":id" ] } } }, { "name": "Body: { assetUuid: string }", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/tags/:id/apply", "host": [ "{{baseUrl}}" ], "path": [ "api", "tags", ":id", "apply" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Remove a custom tag from an asset.", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/tags/:id/apply/:assetUuid", "host": [ "{{baseUrl}}" ], "path": [ "api", "tags", ":id", "apply", ":assetUuid" ] } } }, { "name": "List all assets that have this custom tag applied.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/tags/:id/assets", "host": [ "{{baseUrl}}" ], "path": [ "api", "tags", ":id", "assets" ] } } } ] }, { "name": "User Management", "description": "10 endpoints from userManagementV2.routes.ts", "item": [ { "name": "List the current user's active sessions.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/user-management/me/sessions", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-management", "me", "sessions" ] } } }, { "name": "Revoke one of the current user's own sessions.", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/user-management/me/sessions/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-management", "me", "sessions", ":id" ] } } }, { "name": "List the current user's own API tokens.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/user-management/me/api-tokens", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-management", "me", "api-tokens" ] } } }, { "name": "Create a new API token for the current user.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/user-management/me/api-tokens", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-management", "me", "api-tokens" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Revoke one of the current user's own API tokens.", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/user-management/me/api-tokens/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-management", "me", "api-tokens", ":id" ] } } }, { "name": "List active sessions for a specific user. Requires VIEW_SESSIONS.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/user-management/admin/users/:userId/sessions", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-management", "admin", "users", ":userId", "sessions" ] } } }, { "name": "Revoke all sessions for a specific user. Requires MANAGE_SESSIONS.", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/user-management/admin/users/:userId/sessions", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-management", "admin", "users", ":userId", "sessions" ] } } }, { "name": "List all API tokens across all users. Requires VIEW_API_TOKENS.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/user-management/admin/api-tokens", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-management", "admin", "api-tokens" ] } } }, { "name": "Create an API token on behalf of any user. Requires MANAGE_API_TOKENS.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/user-management/admin/api-tokens", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-management", "admin", "api-tokens" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Revoke any API token. Requires MANAGE_API_TOKENS.", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/user-management/admin/api-tokens/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "user-management", "admin", "api-tokens", ":id" ] } } } ] }, { "name": "Verification", "description": "2 endpoints from verify.routes.ts", "item": [ { "name": "Verification endpoint to check Jan 17 data", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/verify/verify-jan17", "host": [ "{{baseUrl}}" ], "path": [ "api", "verify", "verify-jan17" ] } } }, { "name": "Pull fresh data from Tenable for FIXED state vulns", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/verify/pull-tenable-fixed", "host": [ "{{baseUrl}}" ], "path": [ "api", "verify", "pull-tenable-fixed" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "Fix Planner (VFP)", "description": "90 endpoints from vfp.routes.ts", "item": [ { "name": "Health (no auth needed, no feature flag check)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/health", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "health" ] } } }, { "name": "Feature flags endpoint (admin or module admin - for settings page)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/feature-flags", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "feature-flags" ] } } }, { "name": "PUT /api/vfp/feature-flags", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/feature-flags", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "feature-flags" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Overview", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/overview", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "overview" ] } } }, { "name": "Policy", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/policy", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "policy" ] } } }, { "name": "PUT /api/vfp/policy", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/policy", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "policy" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Audit log — restricted to admin/manager roles", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/audit", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "audit" ] } } }, { "name": "Recompute all risk scores — admin only", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/scores/recompute", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "scores", "recompute" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Paginated scored vulnerability list", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/prioritization", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "prioritization" ] } } }, { "name": "Export scored vulnerabilities as CSV (streams all matching rows)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/prioritization/export/csv", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "prioritization", "export", "csv" ] } } }, { "name": "Single score detail by instance key", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/prioritization/:instanceKey", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "prioritization", ":instanceKey" ] } } }, { "name": "KEV/EPSS enrichment cache stats", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/enrichment/stats", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "enrichment", "stats" ] } } }, { "name": "Generate work packages from scored vulnerabilities", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/workpacks/generate", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "workpacks", "generate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "List work packages with filters", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/workpacks", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "workpacks" ] } } }, { "name": "Get current user's assigned work packages", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/workpacks/my", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "workpacks", "my" ] } } }, { "name": "Get single work package with items", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/workpacks/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "workpacks", ":id" ] } } }, { "name": "Update work package — owner or admin only", "request": { "method": "PATCH", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/workpacks/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "workpacks", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Lock work package (draft -> locked)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/workpacks/:id/lock", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "workpacks", ":id", "lock" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Transition work package status — owner or admin only", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/workpacks/:id/transition", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "workpacks", ":id", "transition" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Create campaign", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/campaigns", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "campaigns" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "List campaigns", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/campaigns", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "campaigns" ] } } }, { "name": "Get single campaign", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/campaigns/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "campaigns", ":id" ] } } }, { "name": "Update campaign", "request": { "method": "PATCH", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/campaigns/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "campaigns", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Add work package to campaign", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/campaigns/:id/add-package", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "campaigns", ":id", "add-package" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Remove work package from campaign", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/campaigns/:id/remove-package", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "campaigns", ":id", "remove-package" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Create playbook", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/playbooks", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "playbooks" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "List playbooks", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/playbooks", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "playbooks" ] } } }, { "name": "Search playbooks", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/playbooks/search", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "playbooks", "search" ] } } }, { "name": "Get single playbook", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/playbooks/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "playbooks", ":id" ] } } }, { "name": "Update playbook", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/playbooks/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "playbooks", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Delete playbook", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/playbooks/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "playbooks", ":id" ] } } }, { "name": "Seed default playbook templates", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/playbooks/seed", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "playbooks", "seed" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Find matching playbooks for a vulnerability class", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/playbooks/match", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "playbooks", "match" ] } } }, { "name": "List available scans for picker UI", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/scans/list", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "scans", "list" ] } } }, { "name": "Trigger a scan", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/scans/trigger", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "scans", "trigger" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Get scan status", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/scans/status/:scanId", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "scans", "status", ":scanId" ] } } }, { "name": "Auto-validate a work package (check which vulns are still open)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/validation/auto-validate/:workPackageId", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "validation", "auto-validate", ":workPackageId" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Preview ticket payload without creating", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/tickets/preview", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "tickets", "preview" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Create ticket (dry-run by default)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/tickets/create", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "tickets", "create" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Sync ticket status from external provider", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/tickets/sync/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "tickets", "sync", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "List tickets for a work package", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/tickets/:workPackageId", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "tickets", ":workPackageId" ] } } }, { "name": "Test ticketing connection", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/tickets/test-connection", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "tickets", "test-connection" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Create ticket from custom payload (AI ticket writer, manual)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/tickets/create-custom", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "tickets", "create-custom" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Create tickets for entire campaign (epic + package issues)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/tickets/campaign/:campaignId", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "tickets", "campaign", ":campaignId" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Request a new exception", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/exceptions/request", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "exceptions", "request" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "List exceptions (paginated)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/exceptions", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "exceptions" ] } } }, { "name": "Get single exception", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/exceptions/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "exceptions", ":id" ] } } }, { "name": "Approve exception", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/exceptions/:id/approve", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "exceptions", ":id", "approve" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Reject exception", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/exceptions/:id/reject", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "exceptions", ":id", "reject" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Extend exception", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/exceptions/:id/extend", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "exceptions", ":id", "extend" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Bulk approve exceptions", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/exceptions/bulk-approve", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "exceptions", "bulk-approve" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Bulk reject exceptions", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/exceptions/bulk-reject", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "exceptions", "bulk-reject" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Check and expire/warn about expiring exceptions", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/exceptions/check-expirations", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "exceptions", "check-expirations" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Get exception audit history", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/exceptions/:id/history", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "exceptions", ":id", "history" ] } } }, { "name": "Plan rescan for a work package", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/validation/plan-rescan", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "validation", "plan-rescan" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Attach evidence to a work package validation", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/validation/attach-evidence", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "validation", "attach-evidence" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Close a work package", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/validation/close-package", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "validation", "close-package" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Get validation record for a work package", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/validation/:workPackageId", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "validation", ":workPackageId" ] } } }, { "name": "Get active SLA policy", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/sla/policy", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "sla", "policy" ] } } }, { "name": "Update SLA policy", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/sla/policy", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "sla", "policy" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "SLA summary (dashboard stats)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/sla/summary", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "sla", "summary" ] } } }, { "name": "SLA breaches (paginated list)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/sla/breaches", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "sla", "breaches" ] } } }, { "name": "Manual SLA check + escalation trigger", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/sla/check", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "sla", "check" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Compute SLA for a specific work package", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/sla/compute/:workPackageId", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "sla", "compute", ":workPackageId" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "List compliance frameworks", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/compliance/frameworks", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "compliance", "frameworks" ] } } }, { "name": "Create compliance framework", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/compliance/frameworks", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "compliance", "frameworks" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Get single compliance framework", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/compliance/frameworks/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "compliance", "frameworks", ":id" ] } } }, { "name": "Update compliance framework", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/compliance/frameworks/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "compliance", "frameworks", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Run compliance assessment", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/compliance/frameworks/:id/assess", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "compliance", "frameworks", ":id", "assess" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Seed default compliance frameworks", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/compliance/seed", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "compliance", "seed" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "List compliance assessments", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/compliance/assessments", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "compliance", "assessments" ] } } }, { "name": "Get single compliance assessment", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/compliance/assessments/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "compliance", "assessments", ":id" ] } } }, { "name": "Compliance trend for a framework", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/compliance/trend/:frameworkId", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "compliance", "trend", ":frameworkId" ] } } }, { "name": "List report templates", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/reports/templates", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "reports", "templates" ] } } }, { "name": "Create report template", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/reports/templates", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "reports", "templates" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Get single report template", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/reports/templates/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "reports", "templates", ":id" ] } } }, { "name": "Update report template", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/reports/templates/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "reports", "templates", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Delete report template", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/reports/templates/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "reports", "templates", ":id" ] } } }, { "name": "Generate report", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/reports/generate", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "reports", "generate" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Seed default report templates", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/reports/seed", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "reports", "seed" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "List generated reports", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/reports", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "reports" ] } } }, { "name": "Get single generated report", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/reports/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "reports", ":id" ] } } }, { "name": "Search CVEs from vulnerability database", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/search/cves", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "search", "cves" ] } } }, { "name": "Search plugin names from vulnerability database", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/search/plugins", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "search", "plugins" ] } } }, { "name": "List distinct plugin families", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/search/plugin-families", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "search", "plugin-families" ] } } }, { "name": "List users (for team member / owner assignment)", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/search/users", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "search", "users" ] } } }, { "name": "List teams", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/teams", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "teams" ] } } }, { "name": "Create team", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/teams", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "teams" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Update team", "request": { "method": "PUT", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/teams/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "teams", ":id" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Delete team", "request": { "method": "DELETE", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vfp/teams/:id", "host": [ "{{baseUrl}}" ], "path": [ "api", "vfp", "teams", ":id" ] } } } ] }, { "name": "Vulnerabilities", "description": "7 endpoints from vulnerabilities.routes.ts", "item": [ { "name": "Aggregates by pluginId to show unique vulnerabilities with affected asset count", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vulnerabilities", "host": [ "{{baseUrl}}" ], "path": [ "api", "vulnerabilities" ] } } }, { "name": "GET /api/vulnerabilities/summary", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vulnerabilities/summary", "host": [ "{{baseUrl}}" ], "path": [ "api", "vulnerabilities", "summary" ] } } }, { "name": "Stage 2: LLM fallback (when regex yields nothing — handles typos, abbreviations, complex phrasing)", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vulnerabilities/nl-query", "host": [ "{{baseUrl}}" ], "path": [ "api", "vulnerabilities", "nl-query" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "Get details for a specific vulnerability including affected assets", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vulnerabilities/:pluginId", "host": [ "{{baseUrl}}" ], "path": [ "api", "vulnerabilities", ":pluginId" ] } } }, { "name": "Used by the frontend query builder to populate the field picker.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vulnerabilities/meta/fields", "host": [ "{{baseUrl}}" ], "path": [ "api", "vulnerabilities", "meta", "fields" ] } } }, { "name": "Returns distinct plugin family values for dropdown population.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vulnerabilities/meta/plugin-families", "host": [ "{{baseUrl}}" ], "path": [ "api", "vulnerabilities", "meta", "plugin-families" ] } } }, { "name": "Returns distinct service values for dropdown population.", "request": { "method": "GET", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/vulnerabilities/meta/services", "host": [ "{{baseUrl}}" ], "path": [ "api", "vulnerabilities", "meta", "services" ] } } } ] }, { "name": "Webhook Receivers", "description": "2 endpoints from webhookReceivers.routes.ts", "item": [ { "name": "verification before JSON parsing.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/webhook-receivers/github/scan-trigger", "host": [ "{{baseUrl}}" ], "path": [ "api", "webhook-receivers", "github", "scan-trigger" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "against the X-Gitlab-Token header.", "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json", "type": "text" }, { "key": "Authorization", "value": "Bearer {{accessToken}}", "type": "text" } ], "url": { "raw": "{{baseUrl}}/api/webhook-receivers/gitlab/scan-trigger", "host": [ "{{baseUrl}}" ], "path": [ "api", "webhook-receivers", "gitlab", "scan-trigger" ] }, "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] } ] }