Need help with your APIs? I offer API discovery, governance & evangelism services. Explore services →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Tenable Attack Path Exports API

The Tenable Attack Path Exports API enables users to export top attack paths, attack technique data, and MITRE ATT&CK heatmap data in JSON or CSV format. MITRE heatmap exports in JSON conform to the MITRE ATT&CK Navigator layer schema, allowing direct import into Navigator. For more information about attack paths and attack techniques, see [Attack Path](https://docs.tenable.com/exposure-management/Content/exposure-management/attack-path/attack-path.htm) in the _Tenable Exposure Management User Guide_.

Tenable Attack Path Exports API is one of 107 APIs that Tenable publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Attack Path Exports. The published artifact set on APIs.io includes an OpenAPI specification.

This API exposes 5 operations across 5 paths, and defines 20 schemas. It is described by OpenAPI 3.0.0, at version 1.0.0.

Requests are made against a single base URL, https://www.tenable.com/downloads/api/v2.

5 operations 5 paths 20 schemas 2 GET3 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.0
API Version
1.0.0
Base URL
https://cloud.tenable.com
Authentication
API Key
Resource Areas
1

Authentication & Security 1

Tenable Attack Path Exports API declares 1 security scheme for authenticating requests. An API key is passed in the header as Authorization (Bearer). By default, every request must be authenticated.

  • Bearer — Example: Bearer {{token}}

Paths & Operations 5

Across 5 paths, the API surfaces 5 operations — 2 GET, 3 POST. Each is listed below with its method, path, parameters, and response codes.

Attack Path Exports 5

The Tenable Attack Path Exports API enables users to export top attack paths, attack technique data, and MITRE ATT&CK heatmap data in JSON or CSV format. MITRE heatmap exports in…

POST
/api/v1/export/attack-path
Export top attack paths
apa-export-attack-path body → 202400401403429500503
POST
/api/v1/export/attack-technique
Export attack techniques
apa-export-attack-technique body → 202400401403429500503
POST
/api/v1/export/mitre-heatmap
Export MITRE ATT&CK heatmap
apa-export-mitre-heatmap body → 202400401403429500503
GET
/api/v1/export/{export_id}/status
Get export status
apa-export-status 1 param → 200401403404429500503
GET
/api/v1/export/{export_id}/download
Download export
apa-export-download 1 param → 200204401403404429500503

Schemas 20

The contract defines 20 schemas that model the data the API accepts and returns. The most detailed are Attack_Path_Exports_AttackTechniqueExportRecord (16 properties), Attack_Path_Exports_MitreHeatmapNavigatorLayer (11 properties), Attack_Path_Exports_MitreHeatmapTechniqueRecord (7 properties), Attack_Path_Exports_AttackPathExportRecord (7 properties). Each schema is shown below with its type and property counts.

Attack_Path_Exports_FileFormat
string
Specifies the file format for the exported data.
Attack_Path_Exports_ErrorResponseStatus
object
2 properties
Attack_Path_Exports_Attack-Technique-Multiple-Filters-Nested
object
Defines a nested logical operator used within a compound filter. This enables deep filtering logic while preventing circular references.
2 properties 1 required
Attack_Path_Exports_AttackPathExportRecord
object
A single attack path record in the export results.
7 properties
Attack_Path_Exports_ErrorResponse
object
3 properties
Attack_Path_Exports_Attack-Technique-Multiple-Filters
object
Defines a compound filter that combines multiple conditions using logical operators.
2 properties 2 required
Attack_Path_Exports_MitreHeatmapTechniqueRecord
object
A single technique entry in the MITRE heatmap export. CSV exports represent the same fields flattened to one row per technique.
7 properties
Attack_Path_Exports_Request-Export-Attack-Paths
object
6 properties 1 required
Attack_Path_Exports_Request-Export-Attack-Techniques
object
6 properties 1 required
Attack_Path_Exports_Attack-Path-Multiple-Filters-Nested
object
Defines a nested logical operator used within a compound filter. This enables deep filtering logic while preventing circular references.
2 properties 1 required
Attack_Path_Exports_Attack-Technique-Single-Filter
object
Defines a single filter condition used to narrow the search results for attack techniques.
3 properties
Attack_Path_Exports_AttackTechniqueExportRecord
object
A single attack technique record in the export results.
16 properties
Attack_Path_Exports_ExportSortParams
object
Defines the sort order applied to the exported results.
2 properties 2 required
Attack_Path_Exports_Response-Export-Status
object
4 properties
Attack_Path_Exports_Attack-Path-Multiple-Filters
object
Defines a compound filter that combines multiple conditions using logical operators.
2 properties 1 required
Attack_Path_Exports_ExportRequestId
object
1 property
Attack_Path_Exports_Attack-Path-Single-Filter
object
Defines a single filter condition used to narrow the search results for attack paths.
3 properties
Attack_Path_Exports_MitreHeatmapNavigatorLayer
object
The MITRE ATT&CK Navigator layer document returned for JSON exports. Conforms to the [official Navigator layer format](https://github.com/mitre-attack/attack-n…
11 properties
Attack_Path_Exports_Mitre-Heatmap-Filter
object
Defines the filter criteria used to narrow the MITRE ATT&CK heatmap export. All fields are optional. If omitted entirely, the system returns the full heatmap f…
5 properties
Attack_Path_Exports_Request-Export-Mitre-Heatmap
object
4 properties 1 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

tenable-attack-path-exports-api-openapi.yml Raw ↑

Other APIs Tenable publishes across the network.

Tenable About API
Tenable Access Control (API) API
Tenable Access Control (Groups) API
Tenable Access Control (Permissions) API
Tenable Access Control (Roles) API
Tenable Access Control (Users) API
Tenable Access Groups v1 API
Tenable Access Groups v2 API
Tenable Account Groups API
Tenable Accounts API
Tenable Activity Log API
Tenable AD object API