Checkmarx

Checkmarx Reports API

Generate and download scan reports

Documentation GitHub OpenAPI

Operations 3

POST /reports/sastScan Checkmarx Register a new scan report #

GET /reports/sastScan/{reportId} Checkmarx Get report by ID #

GET /reports/sastScan/{reportId}/status Checkmarx Get report generation status #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/checkmarx-reports-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Checkmarx SAST Reports API
  description: REST API for Checkmarx Static Application Security Testing (SAST), enabling programmatic management of projects, scans, and results for identifying security vulnerabilities in source code through static analysis.
  version: '1.0'
  contact:
    name: Checkmarx Support
    url: https://support.checkmarx.com/
  termsOfService: https://checkmarx.com/terms-of-use/
servers:
- url: https://{checkmarx-server}/cxrestapi
  description: Checkmarx SAST Server
  variables:
    checkmarx-server:
      default: your-checkmarx-instance.com
      description: Hostname of the Checkmarx SAST server
security:
- bearerAuth: []
tags:
- name: Reports
  description: Generate and download scan reports
paths:
  /reports/sastScan:
    post:
      operationId: createReport
      summary: Checkmarx Register a new scan report
      description: Request generation of a scan report in the specified format (PDF, XML, CSV, RTF).
      tags:
      - Reports
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateReportRequest'
      responses:
        '202':
          description: Report generation accepted
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ReportStatus'
        '400':
          description: Invalid request
        '401':
          description: Unauthorized
  /reports/sastScan/{reportId}:
    get:
      operationId: getReportById
      summary: Checkmarx Get report by ID
      description: Download a generated scan report by its ID.
      tags:
      - Reports
      parameters:
      - $ref: '#/components/parameters/reportId'
      responses:
        '200':
          description: Report content
          content:
            application/pdf:
              schema:
                type: string
                format: binary
            application/xml:
              schema:
                type: string
                format: binary
            text/csv:
              schema:
                type: string
                format: binary
        '401':
          description: Unauthorized
        '404':
          description: Report not found
  /reports/sastScan/{reportId}/status:
    get:
      operationId: getReportStatus
      summary: Checkmarx Get report generation status
      description: Check the status of a report generation request.
      tags:
      - Reports
      parameters:
      - $ref: '#/components/parameters/reportId'
      responses:
        '200':
          description: Report status
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ReportStatus'
        '401':
          description: Unauthorized
        '404':
          description: Report not found
components:
  schemas:
    ReportStatus:
      type: object
      properties:
        reportId:
          type: integer
          description: Report unique identifier
        status:
          type: object
          properties:
            id:
              type: integer
              description: Status ID
            value:
              type: string
              enum:
              - InProcess
              - Created
              - Failed
              description: Report generation status
    CreateReportRequest:
      type: object
      required:
      - reportType
      - scanId
      properties:
        reportType:
          type: string
          enum:
          - PDF
          - RTF
          - CSV
          - XML
          description: Report output format
        scanId:
          type: integer
          description: Scan ID to generate report for
  parameters:
    reportId:
      name: reportId
      in: path
      required: true
      description: Report unique identifier
      schema:
        type: integer
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: OAuth 2.0 bearer token obtained from the authentication endpoint
externalDocs:
  description: Checkmarx SAST REST API Documentation
  url: https://checkmarx.com/resource/documents/en/34965-8158-rest-api.html