How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Rapid7 Asset Discovery API

Resources for managing and viewing the mechanisms used to automatically discover assets.

Rapid7 Asset Discovery API is one of 50 APIs that Rapid7 publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Asset Discovery. The published artifact set on APIs.io includes an OpenAPI specification.

This API exposes 10 operations across 7 paths, and defines 17 schemas. It is described by OpenAPI 3.2.0, at version 3.

Requests are made against a single base URL, https://localhost:3780/.

10 operations 7 paths 17 schemas 1 DELETE5 GET3 POST1 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
3
Base URL
https://us.api.insight.rapid7.com/vm/v4
Authentication
HTTP Basic
Contact
Resource Areas
1

Authentication & Security 1

Rapid7 Asset Discovery API declares 1 security scheme for authenticating requests. It accepts HTTP basic authentication (Basic).

Paths & Operations 10

Across 7 paths, the API surfaces 10 operations — 1 DELETE, 5 GET, 3 POST, 1 PUT. Each is listed below with its method, path, parameters, and response codes.

Asset Discovery 10

Resources for managing and viewing the mechanisms used to automatically discover assets.

GET
/api/3/discovery_connections
Discovery Connections
getDiscoveryConnections 3 params → 200401404500503
GET
/api/3/discovery_connections/{id}
Discovery Connection
getDiscoveryConnection 1 param → 200401404500503
POST
/api/3/discovery_connections/{id}/connect
Discovery Connection Reconnect
reconnectDiscoveryConnection 1 param → 200400401500503
GET
/api/3/sonar_queries
Sonar Queries
getSonarQueries → 200401404500503
POST
/api/3/sonar_queries
Sonar Queries
createSonarQuery body → 200400401500503
POST
/api/3/sonar_queries/search
Sonar Query Search
sonarQuerySearch body → 200400401500503
GET
/api/3/sonar_queries/{id}
Sonar Query
getSonarQuery 1 param → 200401404500503
PUT
/api/3/sonar_queries/{id}
Sonar Query
updateSonarQuery 1 param body → 200400401404500503
DELETE
/api/3/sonar_queries/{id}
Sonar Query
deleteSonarQuery 1 param → 200401404500503
GET
/api/3/sonar_queries/{id}/assets
Sonar Query Assets
getSonarQueryAssets 1 param → 200401404500503

Schemas 17

The contract defines 17 schemas that model the data the API accepts and returns. The most detailed are DiscoveryConnection (21 properties), SonarCriterion (5 properties), SonarQuery (4 properties), PageInfo (4 properties). Each schema is shown below with its type and property counts.

SonarCriterion
object
5 properties
InternalServerError
object
3 properties 1 required
Link
object
2 properties
DiscoveryConnection
object
21 properties
Resources_DiscoveryAsset
object
2 properties
Links
object
1 property
Resources_SonarQuery
object
2 properties
SonarQuery
object
4 properties
ServiceUnavailableError
object
3 properties 1 required
NotFoundError
object
3 properties 1 required
CreatedReference_DiscoveryQueryID_Link
object
2 properties
UnauthorizedError
object
3 properties 1 required
DiscoveryAsset
object
3 properties
PageInfo
object
4 properties
SonarCriteria
object
1 property
BadRequestError
object
3 properties 1 required
PageOf_DiscoveryConnection
object
3 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

rapid7-asset-discovery-api-openapi.yml Raw ↑

Other APIs Rapid7 publishes across the network.

Rapid7 InsightVM Cloud API
Rapid7 Insight Platform API
Rapid7 InsightIDR API
Rapid7 Accounts API
Rapid7 Administration API
Rapid7 Apps API
Rapid7 Asset API
Rapid7 Asset Group API
Rapid7 Assets API
Rapid7 Attachments API
Rapid7 Attack Templates API
Rapid7 Blackouts API
Where this information came from

This is an independent, third-party profile of Rapid7 Asset Discovery API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.