Need help with your APIs? I offer API discovery, governance & evangelism services. Explore services →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Tenable Attestations API

After you submit a scan to Tenable for ASV review, you can use the Tenable PCI ASV API to retrieve a list of your attestations and see your current attestation request status. For more information, see [Create an Attestation](https://docs.tenable.com/vulnerability-management/Content/pci-asv/CreateAttestation.htm) in the Tenable Vulnerability Management User Guide.

Tenable Attestations API is one of 107 APIs that Tenable publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Attestations. The published artifact set on APIs.io includes an OpenAPI specification.

This API exposes 5 operations across 5 paths, and defines 8 schemas. It is described by OpenAPI 3.0.0, at version 1.0.0.

Requests are made against a single base URL, https://www.tenable.com/downloads/api/v2.

5 operations 5 paths 8 schemas 5 GET

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.0
API Version
1.0.0
Base URL
https://cloud.tenable.com
Authentication
API Key
Resource Areas
1

Authentication & Security 1

Tenable Attestations API declares 1 security scheme for authenticating requests. An API key is passed in the header as Authorization (Bearer). By default, every request must be authenticated.

  • Bearer — Example: Bearer {{token}}

Paths & Operations 5

Across 5 paths, the API surfaces 5 operations — 5 GET. Each is listed below with its method, path, parameters, and response codes.

Attestations 5

After you submit a scan to Tenable for ASV review, you can use the Tenable PCI ASV API to retrieve a list of your attestations and see your current attestation request status. For…

GET
/pci-asv/attestations/list
List attestations
pci-attestations-list 4 params → 200400401403429500
GET
/pci-asv/attestations/details/{attestation_uuid}
Get attestation details
pci-attestations-details 1 param → 200400401403429500
GET
/pci-asv/attestations/details/{attestation_uuid}/disputes
List attestation disputes
pci-attestations-disputes-list 4 params → 200400401403429500
GET
/pci-asv/attestations/{attestation_uuid}/failures/undisputed/list
List undisputed failures
pci-attestations-failures-list 4 params → 200400401403429500
GET
/pci-asv/attestations/{attestation_uuid}/assets/list
List attestation assets
pci-attestations-assets-list 4 params → 200400401403429500

Schemas 8

The contract defines 8 schemas that model the data the API accepts and returns. The most detailed are Response-AttestationList (26 properties), Response-DisputeList (20 properties), Response-AttestationContact (17 properties), Response-UndisputedFailuresList (15 properties). Each schema is shown below with its type and property counts.

Response-AttestationList
object
26 properties
Response-PaginationSortObject
object
An object specifying how the current result set is sorted, including the property by which the results were sorted and the sort direction.
2 properties
Response-AttestationContact
object
The contact information for the owner of the attestation.
17 properties
ErrorResponse
object
3 properties
Response-Pagination
object
An object containing pagination information for the current result set.
4 properties
Response-DisputeList
object
20 properties
Response-UndisputedFailuresList
object
15 properties
Response-AttestationAssetList
object
12 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

tenable-attestations-api-openapi.yml Raw ↑

Other APIs Tenable publishes across the network.

Tenable About API
Tenable Access Control (API) API
Tenable Access Control (Groups) API
Tenable Access Control (Permissions) API
Tenable Access Control (Roles) API
Tenable Access Control (Users) API
Tenable Access Groups v1 API
Tenable Access Groups v2 API
Tenable Account Groups API
Tenable Accounts API
Tenable Activity Log API
Tenable AD object API