How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Mend Applications API

The Applications API from Mend — 8 operation(s) for applications.

Mend Applications API is one of 47 APIs that Mend publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Application. The published artifact set on APIs.io includes an OpenAPI specification and an API reference.

This API exposes 10 operations across 8 paths, and defines 28 schemas. It is described by OpenAPI 3.0.1, at version 3.0.

Requests are made against a single base URL, https://baseUrl.

10 operations 8 paths 28 schemas 1 DELETE4 GET3 POST2 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.1
API Version
3.0
Base URL
https://api-saas.mend.io
Authentication
HTTP Bearer
Resource Areas
1

Authentication & Security 1

Mend Applications API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (JWT) (bearer-key). By default, every request must be authenticated.

  • bearer-key — JWT token Bearer

Paths & Operations 10

Across 8 paths, the API surfaces 10 operations — 1 DELETE, 4 GET, 3 POST, 2 PUT. Each is listed below with its method, path, parameters, and response codes.

Applications 10
GET
/api/v3.0/orgs/{orgUuid}/applications
Get Organization Applications
getOrganizationApplications 3 params → 200400403
POST
/api/v3.0/orgs/{orgUuid}/applications
Create Application
createApplication 1 param body → 200400403
POST
/api/v3.0/orgs/{orgUuid}/applications/summaries
Get Application Statistics
getApplicationSummaries 3 params body → 200400403
GET
/api/v3.0/orgs/{orgUuid}/applications/summaries/totals
Get Application totals
getApplicationsTotals 3 params → 200400403
GET
/api/v3.0/orgs/{orgUuid}/applications/{applicationUuid}/labels
Get Application Labels
getProductLabels 2 params → 200400403
PUT
/api/v3.0/orgs/{orgUuid}/applications/{applicationUuid}/labels
Add Application Label
addApplicationLabel 2 params body → 200400403
DELETE
/api/v3.0/orgs/{orgUuid}/applications/{applicationUuid}/labels/{labelUuid}
Remove Application Label
removeProductLabel 3 params → 200400403
GET
/api/v3.0/orgs/{orgUuid}/applications/{applicationUuid}/scans
Get Application Scans
getScanSummaries_1 4 params → 200400403
PUT
/api/v3.0/orgs/{orgUuid}/applications/{applicationUuid}/violations/sla
Update Multiple Violation SLA
updateMultipleProjectViolationSla_1 2 params body → 200400403
POST
/api/v3.0/applications/{applicationUuid}/dependencies/projects/importSbom
Import SBOM and create a new project (Dependencies - SCA)
createProjectWithSbomScan 1 param body → 201400403404

Schemas 28

The contract defines 28 schemas that model the data the API accepts and returns. The most detailed are ScanSummaryDTOV3 (21 properties), EntityLabelDTOV3 (6 properties), EntityLabelDTO (6 properties), ApplicationSummaryDTOV3 (6 properties). Each schema is shown below with its type and property counts.

ScanSummaryDTOV3
object
21 properties
DWRResponsePageableV3ListScanSummaryDTOV3
object
3 properties
DWRResponsePageableV3CollectionApplicationDTOV3
object
3 properties
ProjectViolationIdentifierDTOV3
object
3 properties
DWRResponsePageableV3ListApplicationSummaryDTOV3
object
3 properties
SbomScanResponseDTO
object
4 properties
EntityLabelDTOV3
object
6 properties
DWRResponseV3ApplicationDTOV3
object
2 properties
MessageDTO
object
1 property
EntityTagDTO
object
2 properties
UpdateMultipleProjectViolationSlaRequestDTOV3
object
2 properties
SbomScanInfoDTO
object
Scan information
2 properties
DWRResponseV3PeriodTotalsDTO
object
2 properties
CreateApplicationRequestDTOV3
object
1 property 1 required
ProjectDTOV3
object
Project information
5 properties
EntityLabelDTO
object
6 properties
SbomScanLinksDTO
object
Log Link
1 property
DWRResponseBase
object
1 property
ApplicationDTOV3
object
2 properties
DWRResponseV3Boolean
object
2 properties
LabelRequestDTOV3
object
2 properties 2 required
DWRResponseV3SbomScanResponseDTO
object
2 properties
PeriodTotalsDTO
object
3 properties
DWRResponseV3ListEntityLabelDTO
object
2 properties
ApplicationSummaryDTOV3
object
6 properties
ScanTagDTO
object
4 properties
MultiContextRequestDTOV3
object
If projectUuids and applicationUuids are empty, action will apply to the whole organization, Provides the requested statistics for all projects that match at l…
2 properties
DWRResponseV3MessageDTO
object
2 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

mend-applications-api-openapi.yml Raw ↑

Other APIs Mend publishes across the network.

Mend Access Management API
Mend Access Management - Organizations API
Mend Administration - Groups API
Mend Administration - Labels API
Mend Administration - Users API
Mend AI API
Mend Alerts - Product API
Mend Alerts - Project API
Mend Asynchronous Process Control API
Mend CustomAttribute - Organization API
Mend CustomAttribute - Product API
Mend CustomAttribute - Project API
Where this information came from

This is an independent, third-party profile of Mend Applications API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.