How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Mend Findings - Project API

The Findings - Project API from Mend — 26 operation(s) for findings - project.

Mend Findings - Project API is one of 47 APIs that Mend publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Findings - Project. The published artifact set on APIs.io includes an OpenAPI specification and an API reference.

This API exposes 27 operations across 26 paths, and defines 113 schemas. It is described by OpenAPI 3.0.1, at version 3.0.

Requests are made against a single base URL, https://baseUrl.

27 operations 26 paths 113 schemas 21 GET2 PATCH1 POST3 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.1
API Version
3.0
Base URL
https://api-saas.mend.io
Authentication
HTTP Bearer
Resource Areas
1

Authentication & Security 1

Mend Findings - Project API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (JWT) (bearer-key). By default, every request must be authenticated.

  • bearer-key — JWT token Bearer

Paths & Operations 27

Across 26 paths, the API surfaces 27 operations — 21 GET, 2 PATCH, 1 POST, 3 PUT. Each is listed below with its method, path, parameters, and response codes.

Findings - Project 27
GET
/api/v3.0/projects/{projectUuid}/dependencies/findings/security
Get project security findings (Dependencies - SCA)
getSecurityVulnerabilityFindings 4 params → 200400403
GET
/api/v3.0/projects/{projectUuid}/dependencies/findings/security/groupBy/library
Get libraries security findings
getLibrarySecurityVulnerabilityFindings 4 params → 200400403
GET
/api/v3.0/projects/{projectUuid}/dependencies/findings/security/groupBy/rootLibrary
Get root libraries security findings (Dependencies - SCA)
getRootLibrarySecurityVulnerabilityFindings 4 params → 200400403
PUT
/api/v3.0/projects/{projectUuid}/dependencies/findings/security/rootLibrary/{rootLibraryUuid}
Update root library security finding (Dependencies - SCA)
updateRootLibrarySecurityFinding 2 params body → 200400403
GET
/api/v3.0/projects/{projectUuid}/dependencies/libraries
Get project libraries (Dependencies - SCA)
getProjectLibraries 3 params → 200400403
GET
/api/v3.0/projects/{projectUuid}/dependencies/libraries/inHouse
Get in-house libraries (Dependencies - SCA)
getProprietaryLibraries 3 params → 200400403
GET
/api/v3.0/projects/{projectUuid}/dependencies/libraries/licenses
Get project due diligence information (Dependencies - SCA)
getDueDiligenceInfoByMultipleContexts 3 params → 200400403
GET
/api/v3.0/projects/{projectUuid}/code/findings
Get a list of project findings (Code - SAST)
listProjectFindingsV3.0 3 params → 200400403500
PATCH
/api/v3.0/projects/{projectUuid}/code/findings
Bulk update of project findings state (review and/or suppression) or severity
bulkPatchProjectFindingV3.0 1 param body → 200400403500
PATCH
/api/v3.0/projects/{projectUuid}/code/findings/{findingSnapshotId}
Update a project finding state (review and/or suppression) or severity (Code - SAST)
patchProjectFindingV3.0 2 params body → 200400403500
GET
/api/v3.0/projects/{projectUuid}/code/findings/{findingUuid}
Get a project finding (Code - SAST)
getProjectFindingV3.0 2 params → 200400403500
POST
/api/v3.0/projects/{projectuuid}/images/findings
Update multiple findings status
updateImgBulkStatus 1 param body → 200400404500
PUT
/api/v3.0/projects/{projectuuid}/images/findings/packages/{packageuuid}
Update package status
updateImgPackageStatus 2 params body → 200400404500
GET
/api/v3.0/projects/{projectuuid}/images/findings/secrets
List latest image scan secrets findings
listLatestImgScanSecretsFindings 3 params → 200500
GET
/api/v3.0/projects/{projectuuid}/images/findings/security
List latest image scan security findings
listLatestImgScanSecurityFindings 3 params → 200500
PUT
/api/v3.0/projects/{projectuuid}/images/findings/security/{findingid}
Update finding status
updateImgFindingStatus 2 params body → 200400404500
GET
/api/v3.0/projects/{projectuuid}/images/packages
List latest image scan packages
listLatestImgScanPackages 3 params → 200500
GET
/api/v3.0/projects/{projectUuid}/ai/findings/technologies
Get project AI technologies
getProjectAITechnologies 3 params → 200400401500
GET
/api/v3.0/projects/{projectUuid}/ai/findings/models
Get project AI models
getProjectAIModels 3 params → 200400401500
GET
/api/v3.0/projects/{projectUuid}/ai/vulnerabilities
Get project AI vulnerabilities
getProjectAIVulnerabilities 3 params → 200400401500
GET
/api/v3.0/projects/{projectUuid}/ai/vulnerabilities/{vulnerabilityId}
Get AI vulnerability details
getProjectAIVulnerabilityDetails 2 params → 200400401404500
GET
/api/v3.0/applications/{applicationUuid}/ai/findings/models
Get application AI models
getApplicationAIModels 3 params → 200400401500
GET
/api/v3.0/applications/{applicationUuid}/ai/vulnerabilities
Get application AI vulnerabilities
getApplicationAIVulnerabilities 3 params → 200400401500
GET
/api/v3.0/projects/{projectUuid}/ai/findings/implementation
Get project implementation findings
getProjectImplementationFindings 4 params → 200400401500
GET
/api/v3.0/projects/{projectUuid}/ai/findings/implementation/snippet/{snippetUuid}
Get implementation finding snippet
getImplementationSnippet 4 params → 200400401404500
GET
/api/v3.0/applications/{applicationUuid}/ai/findings/implementation
Get application implementation findings
getApplicationImplementationFindings 4 params → 200400401500
GET
/api/v3.0/applications/{applicationUuid}/ai/vulnerabilities/{vulnerabilityId}
Get application AI vulnerability details
getApplicationAIVulnerabilityDetails 2 params → 200400401404500

Schemas 113

The contract defines 113 schemas that model the data the API accepts and returns. The most detailed are RootLibrarySecurityFindingDTOV3 (40 properties), dto.FindingV3 (34 properties), LibrarySecurityFindingDTOV3 (34 properties), LibraryDTOV3 (31 properties). Each schema is shown below with its type and property counts.

ResourceAuthorDTO
object
2 properties
model.FindingSuppressionReason
string
dto.MendResponse-dto_SuccessResponse
object
3 properties
v3.V3ImplementationFindingResponse
object
14 properties
VulnerabilityScoringDTO
object
8 properties
DWRResponsePageableV3CollectionLibrarySecurityFindingDTOV3
object
3 properties
dto.DataFlow
object
16 properties
VulnerabilityProfileDTO
object
11 properties
dto.PatchFinding
object
5 properties
dto.FindingSharedStep
object
8 properties
github_com_mend_cloud-native_modules_scanner_model.SecretFinding
object
14 properties
LibraryLocationComponentDTOV3
object
17 properties
github_com_mend_cloud-native_modules_scanner_model.Package
object
4 properties
LibraryExtraInfoDTO
object
26 properties
v3.DTO_AIVulnerabilityDetailResponse
object
3 properties
RootLibrarySecurityFindingDTOV3
object
40 properties
dto.CapecInfo
object
3 properties
dto.RiskFactors
object
4 properties
v3.V3Response-array_v3_V3ImplementationFindingResponse
object
3 properties
FindingIntegrationDTO
object
2 properties
inputs.FindingStatusInputV3
object
5 properties 1 required
v3.V3ProjectInfo
object
2 properties
v3.DTO_AIModel
object
23 properties
v3.DTO_VulnerabilityDetail
object
9 properties
DWRResponseBase
object
1 property
NoticeDTO
object
2 properties 1 required
dto.MendErrorResponse-dto_ErrorResponse
object
3 properties
UpdateFindingsRequestDTOV3
object
3 properties
dto.PcidssInfo
object
2 properties
LicenseReferenceDTO
object
7 properties
CopyrightReferenceDTO
object
9 properties 1 required
dto.Owasp2021Info
object
3 properties
SourceFileLocationComponentDTOV3
object
19 properties
v3.DTO_VulnerabilityScoring
object
6 properties
v3.DTO_AISecurityRiskFactors
object
2 properties
dto.SansTop25Info
object
2 properties
dto.OwaspInfo
object
3 properties
common.Paging
object
2 properties
v3.DTO_AIModelLicense
object
4 properties
v3.DTO_AIVulnerabilitiesResponse
object
5 properties
AttributionReportLibrarySettingRuleDTO
object
1 property
ProjectDTOV3
object
Project information
5 properties
dto.BulkPatchFinding
object
2 properties
ProprietaryInfoDTO
object
5 properties
dto.FilterType
object
2 properties
v3.V3BaseResponse-array_v3_DTO_AIModel
object
3 properties
ResourceExtraDataDTO
object
2 properties
ApplicationDTOV3
object
2 properties
dto.MendCursoredResponse-array_dto_FindingV3
object
3 properties
dto.VulnerabilityTypeDefinition
object
23 properties
VulnerabilityReferenceDTO
object
6 properties
DependencyContextDTOV3
object
4 properties
DWRResponsePageableV3ListLibraryDTOV3
object
3 properties
dto.JiraIssue
object
2 properties
BaseLocationComponentDTOV3
object
17 properties
ComponentReferencesDTO
object
11 properties
LibraryLocationDTO
object
2 properties
EffectiveVulnerabilityInfoDTO
object
2 properties
github_com_mend_cloud-native_modules_common_model.FindingStatus
object
21 properties
VulnerabilityFixInfoDTO
object
11 properties
RiskScoreExplanationDTO
object
3 properties
TrackedIssueDTO
object
17 properties
dto.RiskFactorEndpoint
object
2 properties
model.SecurityFindingExternal
object
20 properties
LightLibraryDTO
object
29 properties
dto.HitrustInfo
object
2 properties
SecurityRiskDTO
object
2 properties
common.BaseApiResponseV3
object
3 properties
v3.DTO_Paging
object
3 properties
SecurityFindingDTOV3
object
18 properties
dto.MendResponse-dto_FindingV3
object
3 properties
model.BulkStatusUpdate
object
2 properties
dto.Workflow
object
2 properties
v3.V3FindingResponse
object
5 properties
DWRResponsePageableV3CollectionRootLibrarySecurityFindingDTOV3
object
3 properties
EntityDTO
object
2 properties
FindingInfoDTOV3
object
5 properties
dto.CallStackItem
object
7 properties
common.AdditionalData
object
3 properties
DWRResponsePageableV3ListLightLibraryDTO
object
3 properties
dto.JiraPlatformIssue
object
8 properties
v3.DTO_AdditionalData
object
2 properties
dto.CweInfo
object
3 properties
dto.FindingAlmIssues
object
3 properties
model.FindingStatusType
string
dto.FindingV3
object
34 properties
v3.V3BaseResponse-array_v3_DTO_AIComponent
object
2 properties
UserCommentDTO
object
4 properties
dto.NistInfo
object
4 properties
v3.DTO_AIComponent
object
4 properties
LibraryComponentDTO
object
14 properties
LibrarySecurityFindingDTOV3
object
34 properties
ThreatAssessmentDTO
object
2 properties
dto.Filter
object
2 properties
dto.FindingComment
object
3 properties
IssueTrackerDTO
object
4 properties
dto.ErrorResponse
object
3 properties
v3.DTO_AIVulnerabilityListItem
object
7 properties
v3.DTO_AILicenseRisk
object
1 property
v3.V3Pagination
object
4 properties
LibraryDTOV3
object
31 properties
UserInfoDTO
object
5 properties 1 required
LibraryLicenseDTOV3
object
6 properties
DWRResponsePageableV3CollectionSecurityFindingDTOV3
object
3 properties
dto.LineBlame
object
3 properties
v3.DTO_VulnerabilityReference
object
8 properties
dto.SuccessResponse
object
3 properties
LibraryComponentDTOV3
object
16 properties
DueDiligenceDTOV3
object
8 properties
DWRResponsePageableV3ListDueDiligenceDTOV3
object
3 properties
dto.HipaaInfo
object
2 properties
DirectRootDTOV3
object
3 properties
dto.AzureDevOpsWorkItem
object
2 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

mend-findings-project-api-openapi.yml Raw ↑

Other APIs Mend publishes across the network.

Mend Access Management API
Mend Access Management - Organizations API
Mend Administration - Groups API
Mend Administration - Labels API
Mend Administration - Users API
Mend AI API
Mend Alerts - Product API
Mend Alerts - Project API
Mend Applications API
Mend Asynchronous Process Control API
Mend CustomAttribute - Organization API
Mend CustomAttribute - Product API
Where this information came from

This is an independent, third-party profile of Mend Findings - Project API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.