How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Tenable Scans API

The Scans API from Tenable — 11 operation(s) for scans.

Tenable Scans API is one of 107 APIs that Tenable publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Scans. The published artifact set on APIs.io includes an OpenAPI specification.

This API exposes 17 operations across 11 paths, and defines 59 schemas. It is described by OpenAPI 3.2.0, at version 1.0.0.

Requests are made against a single base URL, https://www.tenable.com/downloads/api/v2.

17 operations 11 paths 59 schemas 2 DELETE7 GET1 PATCH5 POST2 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0.0
Base URL
https://cloud.tenable.com
Authentication
API Key
Resource Areas
1

Authentication & Security 1

Tenable Scans API declares 1 security scheme for authenticating requests. An API key is passed in the header as Authorization (Bearer). By default, every request must be authenticated.

  • Bearer — Example: Bearer {{token}}

Paths & Operations 17

Across 11 paths, the API surfaces 17 operations — 2 DELETE, 7 GET, 1 PATCH, 5 POST, 2 PUT. Each is listed below with its method, path, parameters, and response codes.

Scans 17
GET
/pci-asv/scans/list
List PCI scans
pci-scans-list 3 params → 200400401403429500
POST
/scans
Create scan
scans-create body → 200400401403429500
GET
/scans
List scans
scans-list 4 params → 200401429500
GET
/scans/{scan_id}
Get scan details
scans-details 2 params → 200401404429500
PUT
/scans/{scan_id}
Update scan
scans-configure 1 param body → 200400401404429500
DELETE
/scans/{scan_id}
Delete scan
scans-delete 1 param → 200401404429500
POST
/was/v2/configs/{config_id}/scans
Launch scan
was-v2-scans-launch 1 param → 202401403404409429500
POST
/api/v3/was/import
Import scan
was-v3-scans-import body → 202400401403429500
POST
/was/v2/configs/{config_id}/scans/search
Search scans
was-v2-scans-search 4 params body → 200400401429500
GET
/was/v2/scans/{scan_id}
Get scan details
was-v2-scans-details 1 param → 200400401404429500
PATCH
/was/v2/scans/{scan_id}
Update scan status
was-v2-scans-status-update 1 param body → 202401404409429500
DELETE
/was/v2/scans/{scan_id}
Delete scan
was-v2-scans-delete 1 param → 202401404409429500
GET
/was/v2/scans/{scan_id}/notes
Get scan notes
was-v2-scans-notes-list 4 params → 200400401403429500
POST
/was/v2/scans/{scan_id}/vulnerabilities/search
Search vulnerabilities for scan
was-v2-scans-details-vulns-search 4 params body → 200400401403429500
PUT
/was/v2/scans/{scan_id}/report
Export scan results
was-v2-scans-export 2 params → 200202400401403415429500
GET
/was/v2/scans/{scan_id}/report
Download exported scan
was-v2-scans-download-export 2 params → 200400401403404415429500
GET
/api/v3/export/{scan_id}
Download debug ZIP file
was-v3-scans-debug-zip-download 1 param → 200400401403429500

Schemas 59

The contract defines 59 schemas that model the data the API accepts and returns. The most detailed are scans_Request-ScanSettings-Assessment (57 properties), scans_Request-ScanSettings-Advanced (54 properties), scans_scan-object-create-update-response (38 properties), scans_Request-ScanSettings-Discovery (34 properties). Each schema is shown below with its type and property counts.

VulnerabilityDetails
object
The details for the vulnerability.
8 properties
Response-Pagination
object
An object containing pagination information for the current result set.
4 properties
Attachment
object
The report attachments for the vulnerability.
5 properties 5 required
AppliedFilters-Scans
object
A single filter to apply to the scan search.
3 properties
ErrorResponse
object
3 properties
HttpSettings
object
The HTTP request settings for the scan.
7 properties
scans_Request-ScanSettings
object
Complete scan settings for creating or updating a scan configuration.
scans_filter
object
4 properties
scans_Request-ScanAudits
object
Specifies compliance audit files to include in the scan. Supports both Tenable-provided (feed) audits and user-uploaded (custom) audits. For more information,…
2 properties
scans_scan-object-list
object
24 properties
scans_request-create-scan-credentials-object
object
An object that specifies credential parameters that enable a scanner to authenticate a connection to a target host. For more information about using managed cr…
1 property
PaginationResponse
object
An object containing pagination information for the current result set.
4 properties
scans_Request-ScanSettings-Discovery
object
Settings that control how the scanner discovers hosts, including host discovery, ping methods, port scanning, service discovery, and identity collection.
34 properties
AuditSettings
object
The settings that allow the scan to audit elements other than the ones detected during crawling.
14 properties
scans_settings-acls
object
6 properties
Response-ScansList
object
12 properties
ReportFindings
object
RequestedAction
string
PluginSettings
object
The settings for enabling or disabling individual plugins and/or plugin families to customize your scan.
5 properties
scans_settings-agent-scan-launch-type
string
For Nessus Agent scans, indicates whether the agent scan should use the scan window (scheduled) or rule-based (triggered) method for scan launches.
BrowserSettings
object
The settings for the virtual browser instance used by the scanner.
6 properties
scans_settings-scan-triggers
array
For Nessus Agent scans, describes the scan triggers used when agentscanlaunchtype is set to triggered.
scans_request-create-and-update-plugins-object
object
A list of plugins to add to the non-remediation scans. Use the [List plugin families](ref:io-plugins-families-list) endpoint to get a list of plugin families t…
1 property
ReportScanTemplate
object
3 properties
scans_Request-ScanSettings-Basic
object
Basic scan configuration settings including name, description, targets, scanner assignment, and notifications.
30 properties 1 required
ReportInfo
object
8 properties
ScanReport
object
2 properties
AppliedFilters-VulnerabilitiesByScan
object
A single filter to apply to the vulnerabilities search for the specified scan.
3 properties
ReportConfig
object
7 properties
ErrorResponse_2
object
Tenable Web App Scanning error response.
1 property 1 required
scans_request-update-scan-credentials-object
object
An object that specifies credential parameters that enable a scanner to authenticate a connection to a target host. For more information about using managed cr…
3 properties
AppliedFilters-Vulnerabilities
object
A single filter to apply to the vulnerabilities search.
3 properties
scans_Request-ScanSettings-Advanced
object
Settings that control general scan behavior, performance, debugging, compliance output, vulnerability options, and credential handling.
54 properties
ReportUserScanTemplate
object
3 properties
scans_ErrorResponse
object
3 properties
ScanStatus
string
The scan status. Values include: - aborted—Terminated before completion for reason other than a user-requested stop. - canceled—Stopped by a user request. - co…
Vulnerability
object
7 properties 7 required
ScopeSettings
object
The URLs and file types that you want to include or exclude from your scan.
22 properties
AssessmentSettings
object
Assessment settings specify which web application elements you want the scanner to audit as it crawls your URLs.
5 properties
ReportScan
object
4 properties
scans_scan-info-response-object
object
29 properties
scans_Request-ScanSettings-Assessment
object
Settings that control vulnerability assessment behavior including accuracy, brute force, SCADA, web application scanning, Windows enumeration, malware scanning…
57 properties
scans_settings-rrules
string
The interval at which the scan repeats. The interval is formatted as a string of three values delimited by semi-colons. These values are: the frequency (FREQ=O…
ScanMetadata
object
Summary statistics for the scan results.
8 properties
Credentials
object
The credentials the scanner uses to run an authenticated scan against the web application. For more information, see the managed credentials category in [Manag…
1 property 1 required
Response-PaginationSortObject
object
An object specifying how the current result set is sorted, including the property by which the results were sorted and the sort direction.
2 properties
scans_host
object
15 properties
scans_scan-object-create-update-response
object
38 properties
scans_Request-ScanSettings-Report
object
Settings that control how scan results are reported and displayed.
7 properties
PaginationResponseSortObject
object
An object specifying how the current result set is sorted, including the property by which the results were sorted and the sort direction.
2 properties
ReportScanNotes
object
scans_note
object
3 properties
scans_history-in-scan-details-response
object
11 properties
scans_vulnerability
object
7 properties
ReportScanSettings
object
9 properties
NessusScanReport
object
Scan
object
11 properties 10 required
ScanNote
object
A note describing error conditions the scanner encountered for a given scan.
6 properties
scans_Request-ScanSettings-Schedule
object
Settings that control when and how often the scan runs.
7 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

tenable-scans-api-openapi.yml Raw ↑

Other APIs Tenable publishes across the network.

Tenable About API
Tenable Access Control (API) API
Tenable Access Control (Groups) API
Tenable Access Control (Permissions) API
Tenable Access Control (Roles) API
Tenable Access Control (Users) API
Tenable Access Groups v1 API
Tenable Access Groups v2 API
Tenable Account Groups API
Tenable Accounts API
Tenable Activity Log API
Tenable AD object API
Where this information came from

This is an independent, third-party profile of Tenable Scans API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.