APIPosture

APIPosture API

APIPosture API as documented publicly: 16 operations. Contract generated from the documentation by API Evangelist (2026-10-16); not the provider's own document.

GitHub OpenAPI

Operations 16

GET /ApiPosture/ApiPosturePro.Java.Releases/releases/latest/download/apiposture-pro.jar GET /ApiPosture/ApiPosturePro.Java.Releases/releases/latest/download/apiposture-pro.jar #
GET /BlagoCuljak/ApiPosture.Java/releases/latest/download/apiposture.jar GET /BlagoCuljak/ApiPosture.Java/releases/latest/download/apiposture.jar #
GET /api/transactions/{transactionid} Retrieve a single transaction #
GET /api/users Unbounded Queries: Allowing API calls like GET /api/users to return millions of records #
POST /api/v1/admin/transactions/refund A customer issues a refund #
GET /api/v1/merchant/all-transactions A customer views all transactions for a merchant #
GET /api/v1/status ISO 27001 Certification Guide: Fix API SSRF Risks #
GET /api/v1/users/{id} API Data Classification & Exposure Security Checklist #
PUT /api/v2/account ISO 27001 Certification Guide: Blocking API Mass Assignment #
POST /cart SOC 2 Certification Guide: Fix API Business Flows #
POST /finalize-order SOC 2 Certification Guide: Fix API Business Flows #
GET /install.sh GET /install.sh #
GET /installer GET /installer #
POST /payment-intent SOC 2 Certification Guide: Fix API Business Flows #
GET /resources/{id} Enforce Explicit Ownership Checks #
GET /users/${userId} GET /users/${userId} #

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/apiposture/refs/heads/main/openapi/_ae-authored/apiposture-openapi-generated.yml

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/apiposture/refs/heads/main/json-schema/apiposture-get-api-transactions-transactionid-response-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/apiposture/refs/heads/main/json-schema/apiposture-put-api-v2-account-response-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/apiposture/refs/heads/main/json-schema/apiposture-put-api-v2-account-request-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/apiposture:apiposture-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

apiposture-openapi-generated.yml Raw ↑ 
openapi: 3.1.0
info:
  title: APIPosture API
  version: '2026-10-16'
  description: 'GENERATED FROM DOCUMENTATION by API Evangelist on 2026-10-16: 16 operation(s) read from 15 public documentation page(s) (each
    operation names its page in x-source). This is not the provider''s published contract; APIPosture has published no machine-readable contract
    that the pipeline could find. Engine: local.'
  x-evidence-tiers:
    code-example: 5
    documentation: 11
    pages-with-code: 6
    pages-read: 15
  x-generated-from: documentation
  x-provenance: generated
  x-authored-by: API Evangelist
  x-generated: '2026-10-16'
  x-generator: generate-contract-from-docs.py
  x-engine: local
  x-sources:
  - https://www.apiposture.com/documentation
  - https://www.apiposture.com/how-it-works
  - https://www.apiposture.com/certification-guides/soc-2-and-iso-27001-certification-guide-api-inventory
  - https://www.apiposture.com/certification-guides/soc-2-certification-guide-to-secure-third-party-apis
  - https://www.apiposture.com/certification-guides/soc-2-certification-guide-to-fix-api-business-flows
  - https://www.apiposture.com/certification-guides/iso-27001-certification-guide-fix-api-ssrf-risks
  - https://www.apiposture.com/certification-guides/soc-2-availability-certification-guide-fix-api4-2023
  - https://www.apiposture.com/certification-guides/pci-dss-40-certification-guide-fixing-bfla
  - https://www.apiposture.com/certification-guides/pci-dss-4-0-certification-guide
  - https://www.apiposture.com/certification-guides/iso-27001-certification-guide-blocking-api-mass-assignment
  - https://www.apiposture.com/certification-guides/automate-soc-2-cc6-2-stop-shadow-apis-in-ci
  - https://www.apiposture.com/certification-guides/automate-iso-27001-a-8-28-stop-api-bola-in-ci-loop
  - https://www.apiposture.com/certification-guides/automating-soc-2-cc61
  - https://www.apiposture.com/security-checklists/api-data-classification-and-exposure-security-checklist
  - https://www.apiposture.com/security-checklists/api-authorization-and-bola-security-checklist
servers:
- url: https://github.com
paths:
  /ApiPosture/ApiPosturePro.Java.Releases/releases/latest/download/apiposture-pro.jar:
    get:
      operationId: get_ApiPosture_ApiPosturePro_Java_Releases_releases_latest_download_apiposture_p
      tags:
      - Apiposture
      summary: GET /ApiPosture/ApiPosturePro.Java.Releases/releases/latest/download/apiposture-pro.jar
      x-source: https://www.apiposture.com/documentation
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: code-example
        language: curl
        snippet: "curl -L https://github.com/ApiPosture/ApiPosturePro.Java.Releases/releases/latest/download/apiposture-pro.jar -o apiposture-pro.jar\
          \ \n java -jar apiposture-pro.jar license activate YOUR-LICENSE-KEY "
  /BlagoCuljak/ApiPosture.Java/releases/latest/download/apiposture.jar:
    get:
      operationId: get_BlagoCuljak_ApiPosture_Java_releases_latest_download_apiposture_jar
      tags:
      - Blagoculjak
      summary: GET /BlagoCuljak/ApiPosture.Java/releases/latest/download/apiposture.jar
      x-source: https://www.apiposture.com/documentation
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: code-example
        language: curl
        snippet: 'curl -L -o apiposture.jar https://github.com/BlagoCuljak/ApiPosture.Java/releases/latest/download/apiposture.jar '
  /api/transactions/{transactionid}:
    get:
      operationId: get_api_transactions_transactionid
      tags:
      - Api
      summary: Retrieve a single transaction
      x-source: https://www.apiposture.com/certification-guides/pci-dss-4-0-certification-guide
      parameters:
      - name: transactionid
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success (status as documented)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetApiTransactionsTransactionidResponse'
      x-evidence:
        kind: documentation
  /api/users:
    get:
      operationId: get_api_users
      tags:
      - Api
      summary: 'Unbounded Queries: Allowing API calls like GET /api/users to return millions of records'
      x-source: https://www.apiposture.com/certification-guides/soc-2-availability-certification-guide-fix-api4-2023
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
  /api/v1/admin/transactions/refund:
    post:
      operationId: post_api_v1_admin_transactions_refund
      tags:
      - Api
      summary: A customer issues a refund
      x-source: https://www.apiposture.com/certification-guides/pci-dss-40-certification-guide-fixing-bfla
      responses:
        '201':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
  /api/v1/merchant/all-transactions:
    get:
      operationId: get_api_v1_merchant_all_transactions
      tags:
      - Api
      summary: A customer views all transactions for a merchant
      x-source: https://www.apiposture.com/certification-guides/pci-dss-40-certification-guide-fixing-bfla
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
  /api/v1/status:
    get:
      operationId: get_api_v1_status
      tags:
      - Api
      summary: 'ISO 27001 Certification Guide: Fix API SSRF Risks'
      x-source: https://www.apiposture.com/certification-guides/iso-27001-certification-guide-fix-api-ssrf-risks
      parameters:
      - name: url
        in: query
        required: false
        schema:
          type: string
        description: The target URL to fetch status for.
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
  /api/v1/users/{id}:
    get:
      operationId: get_api_v1_users_id
      tags:
      - Api
      summary: API Data Classification & Exposure Security Checklist
      description: 'Link Data Findings to Endpoints: Ensure your API catalog automatically tags each endpoint (e.g., `GET /api/v1/users/{id}`)
        with the data classifications found in its responses.'
      x-source: https://www.apiposture.com/security-checklists/api-data-classification-and-exposure-security-checklist
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
  /api/v2/account:
    put:
      operationId: put_api_v2_account
      tags:
      - Api
      summary: 'ISO 27001 Certification Guide: Blocking API Mass Assignment'
      x-source: https://www.apiposture.com/certification-guides/iso-27001-certification-guide-blocking-api-mass-assignment
      parameters:
      - name: payload
        in: query
        required: true
        schema:
          type: string
        description: UserUpdatePayload model containing name and email fields (extra properties allowed).
      - name: db
        in: query
        required: false
        schema:
          type: string
        description: Database session dependency.
      requestBody:
        required: false
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PutApiV2AccountRequest'
      responses:
        '200':
          description: Success (status as documented)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PutApiV2AccountResponse'
      x-evidence:
        kind: documentation
  /cart:
    post:
      operationId: post_cart
      tags:
      - Cart
      summary: 'SOC 2 Certification Guide: Fix API Business Flows'
      x-source: https://www.apiposture.com/certification-guides/soc-2-certification-guide-to-fix-api-business-flows
      responses:
        '201':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
  /finalize-order:
    post:
      operationId: post_finalize_order
      tags:
      - Finalize Order
      summary: 'SOC 2 Certification Guide: Fix API Business Flows'
      x-source: https://www.apiposture.com/certification-guides/soc-2-certification-guide-to-fix-api-business-flows
      responses:
        '201':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
  /install.sh:
    get:
      operationId: get_install_sh
      tags:
      - Install
      summary: GET /install.sh
      x-source: https://www.apiposture.com/certification-guides/automate-soc-2-cc6-2-stop-shadow-apis-in-ci
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: code-example
        language: curl
        snippet: "curl -sSL https://cli.apiposture.com/install.sh | sh\n echo \"$HOME/.apiposture/bin\" >> $GITHUB_PATH\n - name: Execute Route\
          \ Discovery and Drift Comparison Check\n run: |\n apiposture scan  --source-directory=\"./src/controllers\"  --framework=\"fastify\"\
          \  --contract=\"./docs/openapi.yaml\"  --policy-config=\"./compliance/policies/soc2-cc6-perimeter.yaml\"  --output-audit-log=\"./logs/audit-drift-report.json\"\
          \ T"
  /installer:
    get:
      operationId: get_installer
      tags:
      - Installer
      summary: GET /installer
      x-source: https://www.apiposture.com/documentation
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: code-example
        language: curl
        snippet: "curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer \n     - composer install\
          \ \n    script: \n     - vendor/bin/apiposture scan ./app --fail-on high \n Security Rules \n ApiPosture Free includes 8 purpose-built\
          \ rules. See the Features page for detailed explanations.\n Rule \n Category \n Severity \n Description \n AP001 \n Exposure \n HIGH\
          \ \n Unintentional Publi"
  /payment-intent:
    post:
      operationId: post_payment_intent
      tags:
      - Payment Intent
      summary: 'SOC 2 Certification Guide: Fix API Business Flows'
      x-source: https://www.apiposture.com/certification-guides/soc-2-certification-guide-to-fix-api-business-flows
      responses:
        '201':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
  /resources/{id}:
    get:
      operationId: get_resources_id
      tags:
      - Resources
      summary: Enforce Explicit Ownership Checks
      x-source: https://www.apiposture.com/security-checklists/api-authorization-and-bola-security-checklist
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
  /users/${userId}:
    get:
      operationId: get_users_userId
      tags:
      - Users
      summary: GET /users/${userId}
      x-source: https://www.apiposture.com/certification-guides/soc-2-certification-guide-to-secure-third-party-apis
      parameters:
      - name: userId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: code-example
        language: javascript
        snippet: fetch(`https://api.thirdparty.com/users/${userId}`)
components:
  schemas:
    GetApiTransactionsTransactionidResponse:
      type: object
      properties:
        '200':
          type: string
          description: Successful response
        '403':
          type: string
          description: Forbidden - User does not have access
        '404':
          type: string
          description: Transaction not found
    PutApiV2AccountRequest:
      type: object
      properties:
        name:
          type: string
        email:
          type: string
    PutApiV2AccountResponse:
      type: object
      properties:
        status:
          type: string
          description: Result status, e.g., "synchronized".
tags:
- name: Api
- name: Apiposture
- name: Blagoculjak
- name: Cart
- name: Finalize Order
- name: Install
- name: Installer
- name: Payment Intent
- name: Resources
- name: Users