How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Synack

Synack mobileapps API

Mobile application assets.

Documentation Provider Profile APIs.io OpenAPI GitHub

Synack mobileapps API is one of 22 APIs that Synack publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Mobile Apps. The published artifact set on APIs.io includes an OpenAPI specification.

This API exposes 18 operations across 9 paths, and defines 35 schemas. It is described by OpenAPI 3.2.0, at version 2.1.020.

Requests are made against 2 base URLs: https://client.synack.com/api/asset, https://client.synack.us/api/asset.

18 operations 9 paths 35 schemas 5 DELETE5 GET4 PATCH3 POST1 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
2.1.020
Base URL
https://api.synack.com
Authentication
OAuth 2.0
Contact
Synack Engineering
Resource Areas
1

Authentication & Security 1

Synack mobileapps API declares 1 security scheme for authenticating requests. It supports OAuth 2.0 (OAuth2) using the implicit flow, exposing 11 scopes.

Paths & Operations 18

Across 9 paths, the API surfaces 18 operations — 5 DELETE, 5 GET, 4 PATCH, 3 POST, 1 PUT. Each is listed below with its method, path, parameters, and response codes.

mobileapps 18

Mobile application assets.

GET
/v2/scripts/{scriptUid}
Gets an asset script.
getAssetScript 1 param → 200401403404500503
DELETE
/v2/scripts/{scriptUid}
Delete a script from a asset.
deleteAssetScript 1 param → 204401403404500503
PATCH
/v2/scripts/{scriptUid}
Patch the properties of an asset script.
patchAssetScript 1 param body → 200401403404422500503
GET
/v2/scripts/{scriptUid}/script-data
Gets the script data for an asset script.
getAssetScriptData 1 param → 200401403404500503
PUT
/v2/assets/{assetUid}/binaries/{version}
Upsert an application binary file or the Url to the binary in the app store.
putApplicationBinary 3 params body → 204401403404412500503
DELETE
/v2/assets/{assetUid}/binaries/{version}
Delete an application binary.
deleteApplicationBinary 2 params → 204401403404500503
GET
/v2/assets/{assetUid}/user-roles
Gets a paginated list of all user roles for a mobile or web application. Returns a 409 status code if the asset is not one of these expected types.
getUserRoles 6 params → 200401403404409500503
POST
/v2/assets/{assetUid}/user-roles
Adds a user role to a mobile or web application asset. Returns a 409 status code if the asset is not one of these expected types.
postUserRole 1 param body → 201204401403404409422500
GET
/v2/user-roles/{userRoleUid}
Retrieves the properties of the supplied user role.
getUserRole 1 param → 200401403404500503
PATCH
/v2/user-roles/{userRoleUid}
Patch properties of a user role for a mobile or web application asset. Will return a 409 status code if the type is not one of these expected types.
patchUserRole 1 param body → 200401403404409500503
DELETE
/v2/user-roles/{userRoleUid}
Delete a user role from a mobile or web application asset. Will return a 409 status code if the type is not one of these expected types.
deleteUserRole 1 param → 204401403404500503
PATCH
/v2/user-roles/{userRoleUid}/scripts/{scriptUid}
Patch properties of a script that's been assigned to user role for a mobile or web application asset.
patchUserRoleScript 2 params body → 200401403404422500503
GET
/v2/user-roles/{userRoleUid}/user-role-credentials
Gets the paginated credentials owned by the user role.
getUserRoleCredentials 6 params → 200401403404500503
POST
/v2/user-roles/{userRoleUid}/user-role-credentials
Add a credential to a user role. Returns 409 Conflict if the credentials do not match the structure of previously created credentials.
postUserRoleCredential 1 param body → 201400401403404409413422
PATCH
/v2/user-roles/{userRoleUid}/user-role-credentials
Update the properties of multlipe user role credentials. Returns 409 Conflict when the credential format does not match existing credentials.
patchUserRoleCredentials 1 param body → 200400401403404409413422
DELETE
/v2/user-roles/{userRoleUid}/user-role-credentials
Delete every credential belonging to the user role.
deleteUserRoleCredentials 2 params → 204401403413500503
DELETE
/v2/user-role-credentials/{credentialUid}
Delete a user role credentialt.
deleteUserRoleCredential 1 param → 204401403404500503
POST
/v2/user-role-credentials
Assign user role credentials to a user for mobile application or web application assets in a listing.
assignUserRoleCredentialsToUser 3 params → 200204403404409500503

Schemas 35

The contract defines 35 schemas that model the data the API accepts and returns. The most detailed are ProblemDetails (9 properties), UserRoleScriptUpdate (5 properties), UserRoleCredentialUpdate (4 properties), UserRoleCredentialSummary (4 properties). Each schema is shown below with its type and property counts.

AssetScript
CheckerStatus
string
Status reported by automated checkers.
Updatable
FailedValidation
object
3 properties 1 required
CredentialUID
string
Unique identifier for a credential.
UserRoleCredentialUpdate
object
Update to a credential used by an application in context of a user role.
4 properties
UserRole
AuthenticationStrategy
MultiUserRoleCredentialUpdate
array
Base64Data
string
Base64 encoding of data.
WritableUID
string
Unique Identifier for POST/PATCH/PUT request bodies.
CredentialSharing
string
Determines the limits on users that may be assigned; "one" permits only one user to be assigned, "many" places no limit, and "all" prevents any users to explic…
ListingUID
string
Unique identifier for an listing.
IndexedFailedValidations
object
2 properties
UserRoleScriptUpdate
object
Updatable properties of a script in context of a user role.
5 properties
ApplicationBinary
object
2 properties
ScriptRole
string
CredentialCounts
object
Credential counts by credential status in context of a user role.
3 properties
ProblemDetails
object
See [RFC 7807: Problem Details for HTTP APIs](https://tools.ietf.org/html/rfc7807)
9 properties
OperationUserUID
string
Automatically set by the server to the requesting user whenever the resource is updated. May be a user account or a service account if the action is performed…
OrganizationUID
string
Unique identifier for an organization.
UserRoleUID
string
Unique identifier for a mobile or web application user role.
UserRoleCredentialSummary
object
Credential used by an application in context of a user role.
4 properties
SingleOrMultiUserRoleCredential
ArrayOfUserRoleCredentials
array
UID
string
Unique Identifier.
UserRoleScript
Creatable
object
2 properties 2 required
Scripts
object
Map of scripts used by this strategy, keyed by script role.
3 properties
UserUID
string
Unique identifier for a user.
UserRoleCredentialUpdateMultiItem
Item in a bulk update to a credentials used by an application in context of a user role.
AuthenticationStrategies
object
Map of authentication strategies for various scanners, keyed by asset scanner name.
2 properties
ArrayOfUserRoles
array
AssetUID
string
Unique identifier for an asset.
UserRoleCredential
Credential used by an application in context of a user role.

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

synack-mobileapps-api-openapi.yml Raw ↑

Other APIs Synack publishes across the network.

Synack Assessment Groups API
AE Profile APIs.io
Synack Assessment Lifecycle API
AE Profile APIs.io
Synack Assessments API
AE Profile APIs.io
Synack asset-relationships API
AE Profile APIs.io
Synack assetproviders API
AE Profile APIs.io
Synack Assets API
AE Profile APIs.io
Synack Comments API
AE Profile APIs.io
Synack credentials API
AE Profile APIs.io
Synack external-relationships API
AE Profile APIs.io
Synack health API
AE Profile APIs.io
Synack Hosts API
AE Profile APIs.io
Synack Missions API
AE Profile APIs.io
#Mobile Apps
← Back to S APIs
API Details
ID
synack:synack-mobileapps-api
Base URL
https://api.synack.com
Docs
https://docs.synack.com/
Provider
Synack
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=synack-mobileapps-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/synack-mobileapps-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Synack mobileapps API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.