How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Fortify

Fortify Releases API

Manage releases within applications

Documentation Provider Profile APIs.io OpenAPI GitHub

Fortify Releases API is one of 42 APIs that Fortify publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Releases. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, authentication docs, and a getting-started guide.

This API exposes 16 operations across 13 paths, and defines 18 schemas. It is described by OpenAPI 3.2.0, at version v3.

Requests are made against 3 base URLs: https://api.ams.fortify.com, https://api.emea.fortify.com, https://api.apac.fortify.com.

16 operations 13 paths 18 schemas 1 DELETE12 GET2 POST1 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
v3
Base URL
https://api.ams.fortify.com
Authentication
HTTP Bearer
Contact
OpenText Fortify Support
License
Proprietary
Resource Areas
1

Authentication & Security 1

Fortify Releases API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (JWT) (bearerAuth). By default, every request must be authenticated.

  • bearerAuth — OAuth2 Bearer token obtained from POST /oauth/token using either clientcredentials or password grant type.

Paths & Operations 16

Across 13 paths, the API surfaces 16 operations — 1 DELETE, 12 GET, 2 POST, 1 PUT. Each is listed below with its method, path, parameters, and response codes.

Releases 16

Manage releases within applications

GET
/api/v3/applications/{applicationId}/releases
Fortify List application releases
listApplicationReleases 8 params → 200401403404429
GET
/api/v3/releases
Fortify List releases
listReleases 7 params → 200401403429
POST
/api/v3/releases
Fortify Create release
createRelease body → 201400401403429
GET
/api/v3/releases/{releaseId}
Fortify Get release
getRelease 1 param → 200401403404429
PUT
/api/v3/releases/{releaseId}
Fortify Update release
updateRelease 1 param body → 200400401403404429
DELETE
/api/v3/releases/{releaseId}
Fortify Delete release
deleteRelease 1 param → 200401403404429
GET
/api/v3/releases/{releaseId}/scans
Fortify List release scans
listReleaseScans 6 params → 200401403404429
GET
/api/v3/releases/{releaseId}/scans/{scanId}
Fortify Get release scan
getReleaseScan 2 params → 200401403404429
GET
/api/v3/releases/{releaseId}/scans/{scanId}/polling-summary
Fortify Get scan polling summary
getReleaseScanPollingSummary 2 params → 200401403404429
GET
/api/v3/releases/{releaseId}/fpr
Fortify Download release FPR
downloadReleaseFpr 2 params → 200401403404429
GET
/api/v3/releases/{releaseId}/category-rollups
Fortify List vulnerability category rollups
listReleaseCategoryRollups 5 params → 200401403404429
GET
/api/v3/releases/{releaseId}/assessment-types
Fortify List assessment types
listReleaseAssessmentTypes 8 params → 200401403404429
GET
/api/v3/releases/{releaseId}/static-scan-options
Fortify Get static scan options
getReleaseStaticScanOptions 5 params → 200401403404429
POST
/api/v3/releases/{releaseId}/audit-action
Fortify Set audit action
setReleaseAuditAction 1 param body → 204400401403404429
GET
/api/v3/releases/{releaseId}/audit-options
Fortify Get audit options
getReleaseAuditOptions 1 param → 200401403404429
GET
/api/v3/releases/{releaseId}/import-scan-session-id
Fortify Get import scan session ID
getReleaseImportScanSessionId 1 param → 200401403404429

Schemas 18

The contract defines 18 schemas that model the data the API accepts and returns. The most detailed are Release (17 properties), Scan (12 properties), PostReleaseRequest (5 properties), AssessmentType (5 properties). Each schema is shown below with its type and property counts.

GetStaticScanOptionsResponse
object
Available options for starting a static scan
2 properties
PostReleaseRequest
object
Request body for creating a release
5 properties 3 required
AssessmentType
object
Represents an assessment type
5 properties
DeleteResponse
object
Generic delete response
1 property
ScanListResponse
object
Paginated list of scans
2 properties
PostReleaseResponse
object
Response after creating a release
2 properties
ReleaseListResponse
object
Paginated list of releases
2 properties
PutReleaseResponse
object
Response after updating a release
1 property
GetAuditOptionsResponse
object
Available audit options
1 property
PostAuditActionRequest
object
Request body for setting audit action on vulnerabilities
1 property
PutReleaseRequest
object
Request body for updating a release
3 properties
Release
object
Represents a release within an application
17 properties
CategoryRollupsResponse
object
Vulnerability category rollup data
1 property
PollingScanSummary
object
Scan status for polling
5 properties
Scan
object
Represents a security scan
12 properties
GetImportScanSessionIdResponse
object
Response with import scan session ID
1 property
ErrorResponse
object
Error response
1 property
ReleaseAssessmentTypeListResponse
object
List of available assessment types for a release
2 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

fortify-releases-api-openapi.yml Raw ↑

Other APIs Fortify publishes across the network.

Fortify Alert Definitions API
AE Profile APIs.io
Fortify API Keys API
AE Profile APIs.io
Fortify Applications API
AE Profile APIs.io
Fortify Artifacts API
AE Profile APIs.io
Fortify Attributes API
AE Profile APIs.io
Fortify Audit Templates API
AE Profile APIs.io
Fortify Auth Entities API
AE Profile APIs.io
Fortify Authentication API
AE Profile APIs.io
Fortify CI/CD API
AE Profile APIs.io
Fortify Cloud Pools API
AE Profile APIs.io
Fortify Custom Tags API
AE Profile APIs.io
Fortify DAST Automated Scans API
AE Profile APIs.io
#Releases
← Back to F APIs
API Details
ID
fortify:fortify-releases-api
Base URL
https://api.ams.fortify.com
Docs
https://www.opentext.com/products/fortify-on-demand
Provider
Fortify
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=fortify-releases-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/fortify-releases-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Fortify Releases API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.