Balbix

Balbix REST API

Read-only REST API (v1) for programmatic access to Balbix Assets and their associated Vulnerabilities, Misconfigurations, Software Inventory, Applications and application Artifacts. Authentication is a two-part scheme: HTTP Basic credentials plus a customer key are exchanged at /apis/v1/gen_token for a 30-minute Authorization token, which is sent alongside a per-tenant Client-API-Key header on every call. Endpoints are served from a per-customer tenant host on the balbix.net domain. The API is read-only, reads from a replica database, supports 4 concurrent sessions per customer, and is documented as unsuitable for bulk export.

GitHub

Documentation

📖
APIReference
https://docs.safe.security/balbixhelp/docs/balbix-rest-api-guide-v20
📖
Documentation
https://docs.safe.security/balbixhelp/docs/balbix-rest-api-guide-v20
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/balbix/refs/heads/main/authentication/balbix-authentication.yml
📖
RateLimits
https://raw.githubusercontent.com/api-evangelist/balbix/refs/heads/main/rate-limits/balbix-rate-limits.yml

Other Resources

🔗
Conventions
https://raw.githubusercontent.com/api-evangelist/balbix/refs/heads/main/conventions/balbix-conventions.yml
🔗
DataModel
https://raw.githubusercontent.com/api-evangelist/balbix/refs/heads/main/data-model/balbix-data-model.yml
🔗
APIsJSON
https://raw.githubusercontent.com/api-evangelist/balbix/refs/heads/main/apis.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/balbix-rest-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

API entry from apis.yml

apis.yml Raw ↑ 
aid: balbix:balbix-rest-api
name: Balbix REST API
description: 'Read-only REST API (v1) for programmatic access to Balbix Assets and their associated Vulnerabilities,
  Misconfigurations, Software Inventory, Applications and application Artifacts. Authentication is a two-part
  scheme: HTTP Basic credentials plus a customer key are exchanged at /apis/v1/gen_token for a 30-minute
  Authorization token, which is sent alongside a per-tenant Client-API-Key header on every call. Endpoints
  are served from a per-customer tenant host on the balbix.net domain. The API is read-only, reads from
  a replica database, supports 4 concurrent sessions per customer, and is documented as unsuitable for
  bulk export.'
humanURL: https://docs.safe.security/balbixhelp/docs/balbix-rest-api-guide-v20
baseURL: https://app.balbix.net/apis/v1
x-base-url-template: https://{tenant}.balbix.net/apis/v1
x-base-url-note: Balbix issues each customer a tenant-specific Base URL. The documentation uses https://rs005tra.balbix.net/apis/v1
  in its curl examples and https://rs002tra.balbix.net in in-app links. app.balbix.net is the Balbix-operated
  platform entry point (Okta-fronted).
x-access: gated
x-access-note: API credentials are issued per customer tenant by Balbix Engineering / Customer Success;
  self-service credential creation is documented as planned but not yet available.
tags:
- Assets
- Vulnerabilities
- Misconfigurations
- Software Inventory
- Application
- Security
tags_raw:
- Assets
- Vulnerabilities
- Misconfigurations
- Software Inventory
- Applications
- Security
properties:
- type: APIReference
  url: https://docs.safe.security/balbixhelp/docs/balbix-rest-api-guide-v20
- type: Documentation
  url: https://docs.safe.security/balbixhelp/docs/balbix-rest-api-guide-v20
- type: Authentication
  url: authentication/balbix-authentication.yml
- type: Conventions
  url: conventions/balbix-conventions.yml
- type: RateLimits
  url: rate-limits/balbix-rate-limits.yml
- type: DataModel
  url: data-model/balbix-data-model.yml
x-evidence:
  fetched: '2026-08-02'
  url: https://docs.safe.security/balbixhelp/docs/balbix-rest-api-guide-v20.md
  http_status: 200
  content_type: text/markdown