Cisco Umbrella Roaming Computers API

openapi: 3.0.1
info:
  title: Cisco Umbrella Roaming Computers API
  version: 2.0.0
  description: Manage the roaming computers in the organization.
  contact:
    name: Cloud Security Developer Community
  x-provenance:
    method: harvested
    authored_by: Cisco Umbrella
    harvested_by: API Evangelist
    harvested_on: '2026-08-19'
    first_party: true
    provider_published: true
    source_host: pubhub.devnetcloud.com
    note: 26 first-party OpenAPI 3.0 documents (256 operations) listed by Cisco's own docs-nav config and fetched anonymously.
      Byte-identity reconfirmed 2026-08-19 by SHA-256 against the live source.
  x-evidence:
  - type: source
    url: https://pubhub.devnetcloud.com/media/cloud-security-apis-in-eft/docs/umbrella-config.json
  - type: source
    url: https://developer.cisco.com/docs/cloud-security/
servers:
- url: https://api.umbrella.com/{basePath}
  variables:
    basePath:
      default: deployments/v2
security:
- oauthFlow: []
tags:
- name: Roaming Computers
- name: Organization Information
- name: Umbrella
paths:
  /roamingcomputers:
    get:
      tags:
      - Roaming Computers
      - Umbrella
      description: List the roaming computers.
      summary: List Roaming Computers
      operationId: listRoamingComputers
      security:
      - oauthFlow:
        - deployments.roamingcomputers:read
      parameters:
      - $ref: '#/components/parameters/paginationPageParam'
      - $ref: '#/components/parameters/paginationLimitParam'
      - name: name
        schema:
          type: string
        in: query
        required: false
        description: The name of the roaming computer.
        example: roaming-device-1
      - name: status
        schema:
          type: string
          pattern: ^(Off|Open|Transparent|Encrypted|VA|Network|Disabled|Uninstalled|TrustedCustomerNetwork|CiscoTrustedNetwork|DisabledDueToACVpnFullTunnel)$
        in: query
        required: false
        description: Filter for the status of the roaming computer with DNS-layer security.
        example: Network
      - name: swgStatus
        schema:
          type: string
          pattern: ^(NA|Protected|Unprotected|Disabled|DisabledDueToVPN|DisabledDueToTrustedNetwork|ConfigError|CloudServiceUnavailable)$
        in: query
        required: false
        description: Filter for the status of the roaming computer with Internet security (Secure Web Gateway).
        example: Protected
      - name: lastSyncBefore
        schema:
          type: string
          format: date-time
        in: query
        required: false
        description: The date and time (timestamp) before the last sync.
        example: '2024-09-19T10:34:30.000Z'
      - name: lastSyncAfter
        schema:
          type: string
          format: date-time
        in: query
        required: false
        description: The date and time (timestamp) after the last sync.
        example: '2024-09-19T10:34:30.000Z'
      responses:
        '200':
          description: OK
          headers:
            Content-Type:
              $ref: '#/components/headers/Content-Type'
            Date:
              $ref: '#/components/headers/Date'
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/RoamingComputerObject'
              example:
              - originId: 618400931
                deviceId: AB000C044C87A4F0
                type: anyconnect
                status: Encrypted
                swgStatus: Protected
                lastSyncStatus: Encrypted
                lastSyncSwgStatus: Protected
                lastSync: '2024-09-19T10:34:30.000Z'
                version: 5.2.3
                name: wkst2
                hasIpBlocking: false
                appliedBundle: 2
                osVersion: Microsoft Windows NT 10.0.19045.0
                osVersionName: Windows 10
                anyconnectDeviceId: 9e963836fef9429b66c3e47b58e496efce2b5003
        '400':
          $ref: '#/components/responses/400Error'
        '401':
          $ref: '#/components/responses/401Error'
        '403':
          $ref: '#/components/responses/403Error'
        '404':
          $ref: '#/components/responses/404Error'
        '500':
          $ref: '#/components/responses/500Error'
  /roamingcomputers/{deviceId}:
    get:
      tags:
      - Roaming Computers
      - Umbrella
      description: Get a roaming computer in the organization.
      summary: Get Roaming Computer
      operationId: getRoamingComputer
      security:
      - oauthFlow:
        - deployments.roamingcomputers:read
      parameters:
      - $ref: '#/components/parameters/deviceId'
      responses:
        '200':
          description: OK
          headers:
            Content-Type:
              $ref: '#/components/headers/Content-Type'
            Date:
              $ref: '#/components/headers/Date'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RoamingComputerObject'
              example:
                originId: 618400931
                deviceId: AB000C044C87A4F0
                type: anyconnect
                status: Encrypted
                swgStatus: Protected
                lastSyncStatus: Encrypted
                lastSyncSwgStatus: Protected
                lastSync: '2024-09-19T10:34:30.000Z'
                version: 5.2.3
                name: wkst2
                hasIpBlocking: false
                appliedBundle: 2
                osVersion: Microsoft Windows NT 10.0.19045.0
                osVersionName: Windows 10
                anyconnectDeviceId: 9e963836fef9429b66c3e47b58e496efce2b5003
        '400':
          $ref: '#/components/responses/400Error'
        '401':
          $ref: '#/components/responses/401Error'
        '403':
          $ref: '#/components/responses/403Error'
        '404':
          $ref: '#/components/responses/404Error'
        '500':
          $ref: '#/components/responses/500Error'
    put:
      tags:
      - Roaming Computers
      - Umbrella
      description: Update a roaming computer in the organization.
      summary: Update Roaming Computer
      operationId: updateRoamingComputer
      security:
      - oauthFlow:
        - deployments.roamingcomputers:write
      parameters:
      - $ref: '#/components/parameters/deviceId'
      requestBody:
        content:
          application/json:
            schema:
              properties:
                name:
                  $ref: '#/components/schemas/name'
              type: object
              description: Update the `name` property for the roaming computer.
              required:
              - name
            example:
              name: roaming computer test1
        description: Update the roaming computer.
      responses:
        '200':
          description: OK
          headers:
            Content-Type:
              $ref: '#/components/headers/Content-Type'
            Date:
              $ref: '#/components/headers/Date'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RoamingComputerObject'
              example:
                originId: 618400931
                deviceId: AB000C044C87A4F0
                type: anyconnect
                status: Encrypted
                swgStatus: Protected
                lastSyncStatus: Encrypted
                lastSyncSwgStatus: Protected
                lastSync: '2024-09-19T10:34:30.000Z'
                version: 5.2.3
                name: wkst2
                hasIpBlocking: false
                appliedBundle: 2
                osVersion: Microsoft Windows NT 10.0.19045.0
                osVersionName: Windows 10
                anyconnectDeviceId: 9e963836fef9429b66c3e47b58e496efce2b5003
        '400':
          $ref: '#/components/responses/400Error'
        '401':
          $ref: '#/components/responses/401Error'
        '403':
          $ref: '#/components/responses/403Error'
        '404':
          $ref: '#/components/responses/404Error'
        '500':
          $ref: '#/components/responses/500Error'
    delete:
      tags:
      - Roaming Computers
      - Umbrella
      description: Delete a roaming computer in the organization.
      summary: Delete Roaming Computer
      operationId: deleteRoamingComputer
      security:
      - oauthFlow:
        - deployments.roamingcomputers:write
      parameters:
      - $ref: '#/components/parameters/deviceId'
      responses:
        '204':
          description: No Content
          headers:
            Content-Type:
              $ref: '#/components/headers/Content-Type'
            Date:
              $ref: '#/components/headers/Date'
          content: {}
        '400':
          $ref: '#/components/responses/400Error'
        '401':
          $ref: '#/components/responses/401Error'
        '403':
          $ref: '#/components/responses/403Error'
        '404':
          $ref: '#/components/responses/404Error'
        '500':
          $ref: '#/components/responses/500Error'
  /roamingcomputers/orgInfo:
    get:
      tags:
      - Organization Information
      - Umbrella
      summary: Get OrgInfo Properties
      description: 'Get the OrgInfo.json properties for deploying the Cisco Secure Client on user devices in the organization.

        The Cisco Secure Client with the Internet Security module requires the OrgInfo.json properties.'
      operationId: getOrganizationInfo
      security:
      - oauthFlow:
        - deployments.roamingcomputersOrgInfo:read
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OrgInfo'
              example:
                organizationId: 1234567
                fingerprint: example-fingerprint
                userId: 67890
        '400':
          $ref: '#/components/responses/400Error'
        '401':
          $ref: '#/components/responses/401Error'
        '403':
          $ref: '#/components/responses/403Error'
        '404':
          $ref: '#/components/responses/404Error'
        '500':
          $ref: '#/components/responses/500Error'
components:
  securitySchemes:
    oauthFlow:
      type: oauth2
      description: Client credential flow.
      flows:
        clientCredentials:
          tokenUrl: https://api.umbrella.com/auth/v2/token
          scopes:
            deployments.roamingcomputers:write: Write deployments roaming computers
            deployments.roamingcomputers:read: Read deployments roaming computers
            deployments.roamingcomputersOrgInfo:read: Read deployments roaming computers and OrgInfo properties
  headers:
    Content-Type:
      schema:
        type: string
      description: The MIME content type of the response body.
      example: application/json
    Date:
      schema:
        type: string
        pattern: ^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$
      description: The timestamp of the response.
      example: '2023-03-14T18:34:25Z'
  parameters:
    paginationPageParam:
      name: page
      in: query
      description: The number of a page in the collection.
      required: false
      schema:
        default: 1
        type: integer
        format: int32
        minimum: 1
      example: 3
    paginationLimitParam:
      name: limit
      in: query
      description: The number of records in the collection to return on the page.
      required: false
      schema:
        default: 100
        type: integer
        format: int32
        minimum: 1
        maximum: 100
      example: 40
    deviceId:
      name: deviceId
      in: path
      description: The device ID (deviceId) of the roaming computer.
      schema:
        type: string
      required: true
      example: AB00C7DCEC99D211
  schemas:
    name:
      type: string
      description: The name of the roaming computer. `name` is a sequence of 1–50 characters.
      minLength: 1
      maxLength: 50
      example: roaming-computer-one
    OrgInfo:
      type: object
      description: 'The OrgInfo.json properties for deploying the Cisco Secure Client on user devices in the organization.

        The Cisco Secure Client with the Internet Security module requires the OrgInfo.json properties.'
      required:
      - organizationId
      - fingerprint
      - userId
      properties:
        organizationId:
          type: integer
          description: The organization ID.
          example: 1245678
        fingerprint:
          type: string
          description: A hash that is used to register the Cisco Secure Client on users devices in the organization.
          example: example-fingerprint
        userId:
          type: integer
          format: int32
          description: The first 32 bits of the API key ID.
          example: 1456890
    RoamingComputerObject:
      type: object
      description: The properties of the roaming computer.
      required:
      - originId
      - name
      - deviceId
      - type
      - status
      - swgStatus
      - lastSyncStatus
      - lastSyncSwgStatus
      - lastSync
      - appliedBundle
      - hasIpBlocking
      - version
      - osVersion
      - osVersionName
      properties:
        originId:
          type: integer
          description: The origin ID for the roaming computer.
          example: 1234556
        name:
          $ref: '#/components/schemas/name'
        deviceId:
          type: string
          description: The hex ID of the roaming computer.
          example: AB00C7DCEC99D211
        type:
          type: string
          description: The type of the roaming computer.
          example: anyconnect
        status:
          type: string
          enum:
          - false
          - Open
          - Transparent
          - Encrypted
          - VA
          - Network
          - Disabled
          - Uninstalled
          - TrustedCustomerNetwork
          - CiscoTrustedNetwork
          - DisabledDueToACVpnFullTunnel
          description: The status of the roaming computer with DNS-layer security.
          example: Encrypted
        swgStatus:
          type: string
          enum:
          - false
          - NA
          - Protected
          - Unprotected
          - Disabled
          - DisabledDueToVPN
          - DisabledDueToTrustedNetwork
          - ConfigError
          - CloudServiceUnavailable
          description: The status of the roaming computer with Internet security (Secure Web Gateway).
          example: Protected
        lastSyncStatus:
          type: string
          enum:
          - false
          - Open
          - Transparent
          - Encrypted
          - VA
          - Network
          - Disabled
          - Uninstalled
          - TrustedCustomerNetwork
          - CiscoTrustedNetwork
          - DisabledDueToACVpnFullTunnel
          description: The status of the last sync on the roaming computer with DNS-layer security.
          example: Encrypted
        lastSyncSwgStatus:
          type: string
          enum:
          - NA
          - Protected
          - Unprotected
          - Disabled
          - DisabledDueToVPN
          - DisabledDueToTrustedNetwork
          - ConfigError
          - CloudServiceUnavailable
          description: The status of the last sync on the roaming computer with Internet security (Secure Web Gateway).
          example: Protected
        lastSync:
          type: string
          format: date-time
          description: The date and time (timestamp) of the last sync.
          example: '2024-09-19T10:34:30.000Z'
        appliedBundle:
          type: integer
          description: The policy ID.
          example: 0
        hasIpBlocking:
          type: boolean
          description: Specifies whether the roaming computer has IP blocking.
          example: false
        version:
          type: string
          description: The version of the Cisco Secure Client with the Internet Security module deployed on the roaming computer.
          example: '5.0'
        osVersion:
          type: string
          description: The OS version of the roaming computer.
          example: Microsoft Windows NT 10.0.19045.0
        osVersionName:
          type: string
          description: The OS version name of the roaming computer.
          example: Windows 10
        anyconnectDeviceId:
          type: string
          description: The ID of the device that has the Cisco Secure Client deployed with the Internet Security module.
          example: 6949b5cbfdc0b48ae4a58592867529480d88ef50
      example:
        originId: 618400931
        deviceId: AB000C044C87A4F0
        type: anyconnect
        status: Encrypted
        swgStatus: Protected
        lastSyncStatus: Encrypted
        lastSyncSwgStatus: Protected
        lastSync: '2024-09-19T10:34:30.000Z'
        version: 5.2.3
        name: wkst2
        hasIpBlocking: false
        appliedBundle: 2
        osVersion: Microsoft Windows NT 10.0.19045.0
        osVersionName: Windows 10
        anyconnectDeviceId: 9e963836fef9429b66c3e47b58e496efce2b5003
  responses:
    400Error:
      description: Bad Request
      headers:
        Content-Type:
          $ref: '#/components/headers/Content-Type'
        Date:
          $ref: '#/components/headers/Date'
      content:
        application/json:
          schema:
            type: object
            properties:
              statusCode:
                type: integer
                example: 400
                description: HTTP status code
              error:
                type: string
                example: Bad Request
                description: A malformed client request.
              message:
                type: string
                description: Detailed error message
    401Error:
      description: Unauthorized
      headers:
        Content-Type:
          $ref: '#/components/headers/Content-Type'
        Date:
          $ref: '#/components/headers/Date'
      content:
        application/json:
          schema:
            type: object
            properties:
              statusCode:
                type: integer
                example: 401
                description: HTTP status code
              error:
                type: string
                example: Unauthorized
                description: A brief description of the error
              message:
                type: string
                description: Detailed error message
    403Error:
      description: Forbidden
      headers:
        Content-Type:
          $ref: '#/components/headers/Content-Type'
        Date:
          $ref: '#/components/headers/Date'
      content:
        application/json:
          schema:
            type: object
            properties:
              statusCode:
                type: integer
                example: 403
                description: HTTP status code
              error:
                type: string
                example: Forbidden
                description: A brief description of the error
              message:
                type: string
                description: Detailed error message
    404Error:
      description: Not Found
      headers:
        Content-Type:
          $ref: '#/components/headers/Content-Type'
        Date:
          $ref: '#/components/headers/Date'
      content:
        application/json:
          schema:
            type: object
            properties:
              statusCode:
                type: integer
                example: 404
                description: HTTP status code
              error:
                type: string
                example: Not Found
                description: A brief description of the error
              message:
                type: string
                description: Detailed error message
    500Error:
      description: Internal Server Error
      headers:
        Content-Type:
          $ref: '#/components/headers/Content-Type'
        Date:
          $ref: '#/components/headers/Date'
      content:
        application/json:
          schema:
            type: object
            properties:
              statusCode:
                type: integer
                example: 500
                description: HTTP status code
              error:
                type: string
                example: Internal Server Error
                description: A brief description of the error
              message:
                type: string
                description: Detailed error message
x-provenance:
  method: harvested
  first_party: true
  harvested: '2026-08-19'
  source: https://pubhub.devnetcloud.com/media/cloud-security-apis-in-eft/docs/reference/deployments/roaming-computers.yaml
  publisher: Cisco Systems, Inc. (Cisco DevNet Cloud Security docs)
x-evidence:
  fetched: '2026-08-19'
  url: https://pubhub.devnetcloud.com/media/cloud-security-apis-in-eft/docs/reference/deployments/roaming-computers.yaml
  http_status: 200
  docs: https://developer.cisco.com/docs/cloud-security/