How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Synack Tags API

Tags applied to seeds and seed groups.

Synack Tags API is one of 22 APIs that Synack publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Tags. The published artifact set on APIs.io includes an OpenAPI specification.

This API exposes 14 operations across 8 paths, and defines 33 schemas. It is described by OpenAPI 3.2.0, at version 1.0.

Requests are made against 8 base URLs: https://client.synack.com/api/asset-discovery, https://client.synack.us/api/asset-discovery, https://api.synack.com, https://api.synack.us, https://client.synack.com/api/streaming, https://client.synack.us/api/streaming, https://client.synack.com/api/tagging, https://client.synack.us/api/tagging.

14 operations 8 paths 33 schemas 3 DELETE3 GET1 PATCH4 POST3 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0
Base URL
https://api.synack.com
Authentication
OAuth 2.0, HTTP Bearer, HTTP Basic, API Key, HTTP Bearer
Resource Areas
1

Authentication & Security 5

Synack Tags API declares 5 security schemes for authenticating requests. It supports OAuth 2.0 (OAuth2) using the implicit flow, exposing 5 scopes. It accepts HTTP bearer tokens (JWT) (BearerAuth). It accepts HTTP basic authentication (BasicAuth). An API key is passed in the header as X-Auth (ApiKeyAuth). It accepts HTTP bearer tokens (JWT) (bearerAuth).

Paths & Operations 14

Across 8 paths, the API surfaces 14 operations — 3 DELETE, 3 GET, 1 PATCH, 4 POST, 3 PUT. Each is listed below with its method, path, parameters, and response codes.

Tags 14

Tags applied to seeds and seed groups.

POST
/v1/organizations/{organizationUid}/seed-groups/{seedGroupUid}/tags/batchUpdate
Updates a seed groups tags.
updateSeedGroupTags 2 params body → 204400401403409413422500
GET
/v1/vulnerability_tags
Get vulnerability tags
getVulnerabilityTags → 200401
POST
/v1/vulnerability_tags
Create a vulnerability tag
createVulnerabilityTag body → 201400
PUT
/v1/vulnerability_tags/{id}
Update a vulnerability tag
updateVulnerabilityTag 1 param body → 200400404
DELETE
/v1/vulnerability_tags/{id}
Delete a vulnerability tag
deleteVulnerabilityTag 1 param → 204404
GET
/v1/assessment_tags
Retrieve a list of assessments tags
→ 200400404
POST
/v1/assessment_tags
Create a new assessment tag
body → 201400404422
PUT
/v1/assessment_tags/{id}
Update the name of an assessment tag record
1 param body → 200400404422
DELETE
/v1/assessment_tags/{id}
Remove an assessment tag record
1 param → 204404422
GET
/v1/{org_uid}/tags
Returns list of tags per org
getTags 3 params → 200400401500
POST
/v1.0/organizations/{orgUid}/tags
Create new tags. 409 Conflict is logged as warn if the name matches the name of a tag that already exists in a given org uid.
postTags 1 param body → 201400401403404413422500
DELETE
/v1.0/organizations/{orgUid}/tags
Deletes tags.
deleteTags 1 param body → 204400401403500503
PATCH
/v1.0/organizations/{orgUid}/tags
Attach/detach entities to/from org uids and/or tag uids.
patchTags 1 param body → 204400401403413422500503
PUT
/v1.0/organizations/{orgUid}/tags/{tagUid}
Updates tag name by tag uid.
putTags 2 params body → 204400401403404409412422

Schemas 33

The contract defines 33 schemas that model the data the API accepts and returns. The most detailed are ProblemDetails (9 properties), Data (6 properties), BatchTagsUpdate (5 properties), Document (5 properties). Each schema is shown below with its type and property counts.

SeedUID
string
Unique identifier for a seed.
FailedValidation
object
3 properties 1 required
BatchTagsUpdate
object
Tags to remove and add to seeds and seed group
5 properties
Tag
string
IndexedFailedValidations
object
2 properties
ProblemDetails
object
See [RFC 7807: Problem Details for HTTP APIs](https://tools.ietf.org/html/rfc7807)
9 properties
SeedGroupUID
string
Unique identifier for a seed group.
OrganizationUID
string
Unique identifier for an organization.
Tag_2
object
4 properties
Relationship
object
2 properties
Data
object
6 properties
Links
object
2 properties
Error
object
5 properties
Document
object
5 properties
ResourceType
string
EntityType
string
Entity type
Entity
UpdateTag
object
1 property 1 required
TagUIDs
array
Tag_3
Tags
array
DeleteTags
object
1 property 1 required
DelEntities
array
OrgUID
string
Unique identifier for an organization.
PageOfTags
object
1 property
PatchTags
object
3 properties 1 required
NewTag
TagName
string
User-supplied name for this tag.
EntityUID
string
Unique identifier for an entity.
ErrorResponse
object
Error response
2 properties
Entities
array
TagUID
string
Unique identifier for a tag.
NewTags
object
1 property

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

synack-tags-api-openapi.yml Raw ↑

Other APIs Synack publishes across the network.

Synack Assessment Groups API
Synack Assessment Lifecycle API
Synack Assessments API
Synack asset-relationships API
Synack assetproviders API
Synack Assets API
Synack Comments API
Synack credentials API
Synack external-relationships API
Synack health API
Synack Hosts API
Synack Missions API
Where this information came from

This is an independent, third-party profile of Synack Tags API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.