Datadog Vulnerabilities API is one of 290 APIs that Datadog publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
This API exposes 4 JSON Schema definitions.
Tagged areas include Vulnerabilities. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, authentication docs, an API reference, and 4 JSON Schemas.
This API exposes
3 operations
across 3 paths,
and defines 48 schemas.
It is described by OpenAPI 3.0.0, at version 1.0.
Requests are made against 3 base URLs: https://{subdomain}.{site}, {protocol}://{name}, https://{subdomain}.{site}.
3 operations3 paths48 schemas3 GET
Metadata
The identity and technical contract details declared by the specification.
Datadog Vulnerabilities API declares
4 security schemes
for authenticating requests.
It supports OAuth 2.0 (AuthZ) using the authorizationCode flow, exposing 68 scopes.
An API key is passed in the header as DD-API-KEY (apiKeyAuth).
An API key is passed in the header as DD-APPLICATION-KEY (appKeyAuth).
It accepts HTTP bearer tokens (bearerAuth).
By default, every request must be authenticated.
AuthZ — This API uses OAuth 2 with the implicit grant flow.
apiKeyAuth — Your Datadog API Key.
appKeyAuth — Your Datadog APP Key.
Paths & Operations 3
Across 3 paths, the API surfaces 3 operations — 3 GET. Each is listed below with its method, path, parameters, and response codes.
The contract defines 48 schemas that model the data the API accepts and returns. The most detailed are VulnerabilityAttributes (20 properties), NotificationRuleAttributes (10 properties), Remediation (8 properties), JSONAPIErrorItem (5 properties). Each schema is shown below with its type and property counts.
VulnerabilityType
string
The vulnerability type.
RuleUser
object
User creating or modifying a rule.
2 properties
RuleName
string
Name of the notification rule.
VulnerabilityStatus
string
The vulnerability status.
EPSS
object
Vulnerability EPSS severity.
2 properties2 required
ListVulnerabilitiesResponse
object
The expected response schema when listing vulnerabilities.
3 properties1 required
JSONAPIErrorItem
object
API error response body
5 properties
VulnerabilityEcosystem
string
The related vulnerability asset ecosystem.
RuleTypesItems
string
Security rule type which can be used in security rules. Signal-based notification rules can filter signals based on rule types applicationsecurity, logdetectio…
Links
object
The JSON:API links related to pagination.
5 properties3 required
VulnerabilityRelationshipsAffectsData
object
Asset affected by this vulnerability.
2 properties2 required
APIErrorResponse
object
API error response.
1 property1 required
VulnerabilityTool
string
The vulnerability tool.
DependencyLocation
object
Static library vulnerability location.
5 properties5 required
ID
string
The ID of a notification rule.
AssetEntityType
string
The JSON:API type.
CVSS
object
Vulnerability severity.
3 properties3 required
Remediation
object
Vulnerability remediation.
8 properties8 required
Enabled
boolean
Field used to enable or disable the rule.
NotificationRuleAttributes
object
Attributes of the notification rule.
10 properties9 required
TimeAggregation
integer
Time aggregation period (in seconds) is used to aggregate the results of the notification rule evaluation. Results are aggregated over a selected time frame us…
VulnerabilityAttributes
object
The JSON:API attributes of the vulnerability.
20 properties14 required
VulnerabilityRisks
object
Vulnerability risks.
5 properties4 required
VulnerabilityDependencyLocations
object
Static library vulnerability location.
3 properties1 required
TriggerSource
string
The type of security issues on which the rule applies. Notification rules based on security signals need to use the trigger source "securitysignals", while not…
Date
integer
Date as Unix timestamp in milliseconds.
JSONAPIErrorItemSource
object
References to the source of the error.
3 properties
Targets
array
List of recipients to notify when a notification rule is triggered. Many different target types are supported, such as email addresses, Slack channels, and Pag…
NotificationRulesType
string
The rule type associated to notification rules.
NotificationRule
object
Notification rules allow full control over notifications generated by the various Datadog security products. They allow users to define the conditions under wh…
3 properties3 required
JSONAPIErrorResponse
object
API error response.
1 property1 required
Library
object
Vulnerability library.
2 properties1 required
AssetType
string
The asset type
Selectors
object
Selectors are used to filter security issues for which notifications should be generated. Users can specify rule severities, rule types, a query to filter secu…
4 properties1 required
VulnerabilitySeverity
string
The vulnerability severity.
Vulnerability
object
A single vulnerability
4 properties4 required
Metadata
object
The metadata related to this request.
3 properties3 required
VulnerabilityRelationshipsAffects
object
Relationship type.
1 property1 required
Advisory
object
Advisory.
3 properties2 required
VulnerabilityRelationships
object
Related entities object.
1 property1 required
RuleSeverity
string
Severity of a security rule.
VulnerabilitiesType
string
The JSON:API type.
CodeLocation
object
Code vulnerability location.
3 properties1 required
RuleTypes
array
Security rule types used as filters in security rules.
NotificationRuleResponse
object
Response object which includes a notification rule.
1 property
Version
integer
Version of the notification rule. It is updated when the rule is modified.
NotificationRuleQuery
string
The query is composed of one or several key:value pairs, which can be used to filter security issues on tags and attributes.
VulnerabilityCvss
object
Vulnerability severities.
2 properties2 required
Specification
The full machine-readable OpenAPI contract behind this narrative.
Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.
Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.
MCP tools for apis
4 tools reach this content
search_api_evangelistSearch every content type across the network at once.
find_relatedThe shared-tag relevance graph — what else covers this.
get_tagEverything one tag labels, across all content types.
guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
A second provider on the same verified email joins the account you already have.
Your account
ⓘWhere this information came from
This is an independent, third-party profile of Datadog Vulnerabilities API, published by
API Evangelist. We do not operate, host, resell, or
support these APIs, and we are not affiliated with or endorsed by the company unless stated above.
Everything here is built from publicly available information — the company's own site,
developer portal, documentation, public repositories, and the specifications it publishes for public use.
Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's
public API artifacts, scored against a published rubric. They are not certifications,
endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and
you do not need to justify the request. A removed company is recorded as unrated, never scored
zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com
·
Read the full data-sourcing policy → On a security or compliance team? Put security in the subject line and
you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.
