Checkmarx

Checkmarx Projects API

Manage scanning projects and their configuration

Documentation GitHub OpenAPI

Operations 12

GET /projects Checkmarx List projects #

POST /projects Checkmarx Create a project #

GET /projects/{projectId} Checkmarx Get project details #

PUT /projects/{projectId} Checkmarx Update a project #

DELETE /projects/{projectId} Checkmarx Delete a project #

GET /projects/{projectId}/sourceCode/remoteSettings/git Checkmarx Get Git remote source settings #

POST /projects/{projectId}/sourceCode/remoteSettings/git Checkmarx Set Git remote source settings #

GET /risk-management/projects Checkmarx List all projects #

POST /risk-management/projects Checkmarx Create a new project #

GET /risk-management/projects/{projectId} Checkmarx Get project details #

PUT /risk-management/projects/{projectId} Checkmarx Update a project #

DELETE /risk-management/projects/{projectId} Checkmarx Delete a project #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/checkmarx-projects-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Checkmarx Projects API
  version: '1.0'
  contact:
    name: Checkmarx Support
    url: https://support.checkmarx.com/
  termsOfService: https://checkmarx.com/terms-of-use/
  description: 'Operations tagged Projects across 3 of this provider''s published API definitions: checkmarx-one-openapi.yml, checkmarx-sast-openapi.yml, checkmarx-sca-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://ast.checkmarx.net/api
  description: Checkmarx One (US)
- url: https://eu.ast.checkmarx.net/api
  description: Checkmarx One (EU)
- url: https://{checkmarx-server}/cxrestapi
  description: Checkmarx SAST Server
  variables:
    checkmarx-server:
      default: your-checkmarx-instance.com
      description: Hostname of the Checkmarx SAST server
- url: https://api-sca.checkmarx.net
  description: Checkmarx SCA Cloud (Production)
security:
- bearerAuth: []
tags:
- name: Projects
  description: Manage scanning projects and their configuration
paths:
  /projects:
    get:
      operationId: listProjects
      summary: Checkmarx List projects
      description: Retrieve all projects with optional filtering by name, group, or tag.
      tags:
      - Projects
      parameters:
      - name: offset
        in: query
        description: Pagination offset
        schema:
          type: integer
          default: 0
      - name: limit
        in: query
        description: Number of results to return
        schema:
          type: integer
          default: 20
      - name: name
        in: query
        description: Filter by project name
        schema:
          type: string
      - name: groups
        in: query
        description: Filter by group IDs (comma-separated)
        schema:
          type: string
      - name: tags-keys
        in: query
        description: Filter by tag keys
        schema:
          type: string
      - name: tags-values
        in: query
        description: Filter by tag values
        schema:
          type: string
      responses:
        '200':
          description: List of projects
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ProjectListResponse'
        '401':
          description: Unauthorized
    post:
      operationId: createProject
      summary: Checkmarx Create a project
      description: Create a new project for security scanning. A project represents a code repository or application component to be scanned.
      tags:
      - Projects
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateProjectRequest'
      responses:
        '201':
          description: Project created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Project'
        '400':
          description: Invalid request
        '401':
          description: Unauthorized
    servers:
    - url: https://ast.checkmarx.net/api
      description: Checkmarx One (US)
    - url: https://eu.ast.checkmarx.net/api
      description: Checkmarx One (EU)
  /projects/{projectId}:
    get:
      operationId: getProject
      summary: Checkmarx Get project details
      description: Retrieve details of a specific project by ID.
      tags:
      - Projects
      parameters:
      - $ref: '#/components/parameters/projectId'
      responses:
        '200':
          description: Project details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Project'
        '401':
          description: Unauthorized
        '404':
          description: Project not found
    put:
      operationId: updateProject
      summary: Checkmarx Update a project
      description: Update an existing project's configuration.
      tags:
      - Projects
      parameters:
      - $ref: '#/components/parameters/projectId'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateProjectRequest'
      responses:
        '204':
          description: Project updated
        '400':
          description: Invalid request
        '401':
          description: Unauthorized
        '404':
          description: Project not found
    delete:
      operationId: deleteProject
      summary: Checkmarx Delete a project
      description: Delete a project and all its associated scans and results.
      tags:
      - Projects
      parameters:
      - $ref: '#/components/parameters/projectId'
      responses:
        '204':
          description: Project deleted
        '401':
          description: Unauthorized
        '404':
          description: Project not found
    servers:
    - url: https://ast.checkmarx.net/api
      description: Checkmarx One (US)
    - url: https://eu.ast.checkmarx.net/api
      description: Checkmarx One (EU)
  /projects/{projectId}/sourceCode/remoteSettings/git:
    get:
      operationId: getProjectGitSettings
      summary: Checkmarx Get Git remote source settings
      description: Retrieve the Git repository settings for a project.
      tags:
      - Projects
      parameters:
      - $ref: '#/components/parameters/projectId_2'
      responses:
        '200':
          description: Git remote settings
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GitSettings'
        '401':
          description: Unauthorized
        '404':
          description: Project not found
    post:
      operationId: setProjectGitSettings
      summary: Checkmarx Set Git remote source settings
      description: Configure the Git repository source settings for a project.
      tags:
      - Projects
      parameters:
      - $ref: '#/components/parameters/projectId_2'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GitSettings'
      responses:
        '204':
          description: Git settings updated
        '400':
          description: Invalid request
        '401':
          description: Unauthorized
    servers:
    - url: https://{checkmarx-server}/cxrestapi
      description: Checkmarx SAST Server
      variables:
        checkmarx-server:
          default: your-checkmarx-instance.com
          description: Hostname of the Checkmarx SAST server
  /risk-management/projects:
    get:
      operationId: listProjects
      summary: Checkmarx List all projects
      description: Retrieve a list of all SCA projects for the authenticated tenant.
      tags:
      - Projects
      responses:
        '200':
          description: List of projects
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Project_3'
        '401':
          description: Unauthorized
    post:
      operationId: createProject
      summary: Checkmarx Create a new project
      description: Create a new SCA project for scanning open source dependencies.
      tags:
      - Projects
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateProjectRequest_3'
      responses:
        '201':
          description: Project created successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Project_3'
        '400':
          description: Invalid request
        '401':
          description: Unauthorized
    servers:
    - url: https://api-sca.checkmarx.net
      description: Checkmarx SCA Cloud (Production)
  /risk-management/projects/{projectId}:
    get:
      operationId: getProject
      summary: Checkmarx Get project details
      description: Retrieve details of a specific SCA project.
      tags:
      - Projects
      parameters:
      - $ref: '#/components/parameters/projectId'
      responses:
        '200':
          description: Project details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Project_3'
        '401':
          description: Unauthorized
        '404':
          description: Project not found
    put:
      operationId: updateProject
      summary: Checkmarx Update a project
      description: Update the configuration of an existing SCA project.
      tags:
      - Projects
      parameters:
      - $ref: '#/components/parameters/projectId'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateProjectRequest_3'
      responses:
        '204':
          description: Project updated
        '400':
          description: Invalid request
        '401':
          description: Unauthorized
        '404':
          description: Project not found
    delete:
      operationId: deleteProject
      summary: Checkmarx Delete a project
      description: Delete an SCA project and all associated scan data.
      tags:
      - Projects
      parameters:
      - $ref: '#/components/parameters/projectId'
      responses:
        '204':
          description: Project deleted
        '401':
          description: Unauthorized
        '404':
          description: Project not found
    servers:
    - url: https://api-sca.checkmarx.net
      description: Checkmarx SCA Cloud (Production)
components:
  parameters:
    projectId:
      name: projectId
      in: path
      required: true
      description: Project unique identifier
      schema:
        type: string
        format: uuid
    projectId_2:
      name: projectId
      in: path
      required: true
      description: Project unique identifier
      schema:
        type: integer
  schemas:
    ProjectListResponse:
      type: object
      properties:
        totalCount:
          type: integer
          description: Total number of projects
        filteredTotalCount:
          type: integer
          description: Total count after filtering
        projects:
          type: array
          items:
            $ref: '#/components/schemas/Project'
    UpdateProjectRequest:
      type: object
      properties:
        name:
          type: string
          description: Project name
        groups:
          type: array
          items:
            type: string
        repoUrl:
          type: string
        mainBranch:
          type: string
        tags:
          type: object
          additionalProperties:
            type: string
        criticality:
          type: integer
    Project:
      type: object
      properties:
        id:
          type: string
          format: uuid
          description: Project unique identifier
        name:
          type: string
          description: Project name
        groups:
          type: array
          items:
            type: string
          description: Group IDs the project belongs to
        repoUrl:
          type: string
          description: Repository URL
        mainBranch:
          type: string
          description: Main branch name
        origin:
          type: string
          description: Project creation origin
        tags:
          type: object
          additionalProperties:
            type: string
          description: Key-value tags
        criticality:
          type: integer
          description: Project criticality level (1-5)
        createdAt:
          type: string
          format: date-time
          description: Creation timestamp
        updatedAt:
          type: string
          format: date-time
          description: Last update timestamp
    CreateProjectRequest:
      type: object
      required:
      - name
      properties:
        name:
          type: string
          description: Project name
        groups:
          type: array
          items:
            type: string
          description: Group IDs to assign
        repoUrl:
          type: string
          description: Source repository URL
        mainBranch:
          type: string
          description: Main branch name
          default: main
        origin:
          type: string
          description: Project origin
        tags:
          type: object
          additionalProperties:
            type: string
        criticality:
          type: integer
          description: Project criticality (1-5)
          default: 3
    UpdateProjectRequest_2:
      type: object
      properties:
        name:
          type: string
          description: Project name
        owningTeam:
          type: string
          description: ID of the team that owns the project
        customFields:
          type: array
          items:
            $ref: '#/components/schemas/CustomField'
    Project_2:
      type: object
      properties:
        id:
          type: integer
          description: Project unique identifier
        teamId:
          type: string
          description: Team ID the project belongs to
        name:
          type: string
          description: Project name
        isPublic:
          type: boolean
          description: Whether the project is public
        customFields:
          type: array
          items:
            $ref: '#/components/schemas/CustomField'
          description: Custom fields attached to the project
        links:
          type: array
          items:
            $ref: '#/components/schemas/Link'
          description: HATEOAS links
    CreateProjectRequest_2:
      type: object
      required:
      - name
      - owningTeam
      properties:
        name:
          type: string
          description: Project name
        owningTeam:
          type: string
          description: ID of the team that owns the project
        isPublic:
          type: boolean
          description: Whether the project is publicly accessible
          default: true
    GitSettings:
      type: object
      required:
      - url
      - branch
      properties:
        url:
          type: string
          description: Git repository URL
        branch:
          type: string
          description: Branch to scan
        privateKey:
          type: string
          description: SSH private key for authentication
    Link:
      type: object
      properties:
        rel:
          type: string
          description: Link relation type
        uri:
          type: string
          format: uri
          description: Link URI
    CustomField:
      type: object
      properties:
        id:
          type: integer
          description: Custom field ID
        value:
          type: string
          description: Custom field value
        name:
          type: string
          description: Custom field name
    Project_3:
      type: object
      properties:
        id:
          type: string
          format: uuid
          description: Project unique identifier
        name:
          type: string
          description: Project name
        createdOn:
          type: string
          format: date-time
          description: Project creation timestamp
        tenantId:
          type: string
          description: Tenant identifier
        assignedTeams:
          type: array
          items:
            type: string
          description: Teams assigned to the project
        lastScanDate:
          type: string
          format: date-time
          description: Timestamp of the most recent scan
        riskScore:
          type: number
          format: float
          description: Overall risk score for the project
        totalPackages:
          type: integer
          description: Total number of packages detected
        highVulnerabilityCount:
          type: integer
          description: Number of high severity vulnerabilities
        mediumVulnerabilityCount:
          type: integer
          description: Number of medium severity vulnerabilities
        lowVulnerabilityCount:
          type: integer
          description: Number of low severity vulnerabilities
    UpdateProjectRequest_3:
      type: object
      properties:
        name:
          type: string
          description: Updated project name
        assignedTeams:
          type: array
          items:
            type: string
          description: Updated team assignments
    CreateProjectRequest_3:
      type: object
      required:
      - name
      properties:
        name:
          type: string
          description: Project name
        assignedTeams:
          type: array
          items:
            type: string
          description: Team IDs to assign to the project
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: OAuth 2.0 bearer token obtained via client credentials from the Checkmarx One IAM service
x-refined-from:
- checkmarx-one-openapi.yml
- checkmarx-sast-openapi.yml
- checkmarx-sca-openapi.yml