Balbix REST API

aid: balbix:balbix-rest-api
name: Balbix REST API
description: 'Read-only REST API (v1) for programmatic access to Balbix Assets and their associated Vulnerabilities,
  Misconfigurations, Software Inventory, Applications and application Artifacts. Authentication is a two-part
  scheme: HTTP Basic credentials plus a customer key are exchanged at /apis/v1/gen_token for a 30-minute
  Authorization token, which is sent alongside a per-tenant Client-API-Key header on every call. Endpoints
  are served from a per-customer tenant host on the balbix.net domain. The API is read-only, reads from
  a replica database, supports 4 concurrent sessions per customer, and is documented as unsuitable for
  bulk export.'
humanURL: https://docs.safe.security/balbixhelp/docs/balbix-rest-api-guide-v20
baseURL: https://app.balbix.net/apis/v1
x-base-url-template: https://{tenant}.balbix.net/apis/v1
x-base-url-note: Balbix issues each customer a tenant-specific Base URL. The documentation uses https://rs005tra.balbix.net/apis/v1
  in its curl examples and https://rs002tra.balbix.net in in-app links. app.balbix.net is the Balbix-operated
  platform entry point (Okta-fronted).
x-access: gated
x-access-note: API credentials are issued per customer tenant by Balbix Engineering / Customer Success;
  self-service credential creation is documented as planned but not yet available.
tags:
- Assets
- Vulnerabilities
- Misconfigurations
- Software Inventory
- Applications
- Security
properties:
- type: APIReference
  url: https://docs.safe.security/balbixhelp/docs/balbix-rest-api-guide-v20
- type: Documentation
  url: https://docs.safe.security/balbixhelp/docs/balbix-rest-api-guide-v20
- type: Authentication
  url: authentication/balbix-authentication.yml
- type: Conventions
  url: conventions/balbix-conventions.yml
- type: RateLimits
  url: rate-limits/balbix-rate-limits.yml
- type: DataModel
  url: data-model/balbix-data-model.yml
x-evidence:
  fetched: '2026-08-02'
  url: https://docs.safe.security/balbixhelp/docs/balbix-rest-api-guide-v20.md
  http_status: 200
  content_type: text/markdown