Cohesity

Cohesity Security API

The Security API from Cohesity — 10 operation(s) for security.

GitHub OpenAPI
Business capability
Cybersecurity Management BC-620

Operations 16

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /clientcsr Create client and server CSR pair · Create Certificate Signing Requests on the cluster #
Ask an LLM
“How do I generate both a client and a server certificate signing request at once?”
“Can a service have more than one outstanding client/server CSR pair?”
Tell an agent
Create a client and server CSR pair for {organization}, {organizationUnit}, {city}, {state}, {countryCode}.
Generate client and server CSRs for service {serviceName} with common name {commonName}.
POST /clientcsr/certificate Import signed client and server certificates · Import the signed certificates on the cluster after the Certificate Signing… #
Ask an LLM
“Once my CA signs the client/server CSR pair, how do I load both certificates back?”
“Do I need to import the client and server certificates together?”
Tell an agent
Import server certificate {certificateServer} and client certificate {certificateClient}.
Install the signed client cert {certificateClient} and server cert {certificateServer} from my CSR pair.
GET /csr List certificate signing requests · List Certificate Signing Requests on the cluster #
Ask an LLM
“Which certificate signing requests are pending on the cluster?”
“Can I list CSRs for just one service?”
Tell an agent
List all CSRs on the cluster.
Show the CSRs for service {serviceName}.
POST /csr Create a single certificate signing request · Create a Certificate Signing Request on the cluster #
Ask an LLM
“How do I generate one CSR for a cluster service's certificate?”
“Can I choose the key algorithm and size for a CSR?”
Tell an agent
Create a CSR for {organization}, {organizationUnit} in {city}, {state}, {countryCode}.
Generate a CSR with DNS names {dnsNames} and a {keySizeBits}-bit key.
POST /csr/certificate Install a signed certificate for a CSR · Update the signed certificate on the cluster after a Certificate Signing… #
Ask an LLM
“Where do I upload the certificate my CA returned for a single CSR?”
“Does the signed certificate need to reference the CSR id?”
Tell an agent
Install certificate {certificate} for CSR {csrId}.
Attach the signed cert {certificate} to the request {csrId}.
GET /csr/{id} Get a certificate signing request · List the specified Certificate Signing Request #
Ask an LLM
“Can I view the contents of one CSR so I can send it to my CA?”
“What details are stored on a specific CSR?”
Tell an agent
Get CSR {id}.
Show me the certificate signing request with id {id}.
DELETE /csr/{id} Delete a certificate signing request · Delete a Certificate Signing Request on the cluster #
Ask an LLM
“How do I discard a CSR so I can create a new one for the same service?”
“Is deleting a CSR permanent?”
Tell an agent destructive · confirm first
Delete CSR {id}.
Remove the outstanding signing request {id}.
GET /security-config Get cluster security settings · Get cluster security settings #
Ask an LLM
“What password strength and lockout rules are set on my cluster?”
“Is certificate-based authentication turned on for the cluster?”
Tell an agent
Show the cluster security settings.
Get the current password and session security configuration.
PUT /security-config Update cluster security settings · Update cluster security settings #
Ask an LLM
“How do I tighten password reuse and lifetime rules on the cluster?”
“Can I change the account lockout policy or user session timeouts?”
Tell an agent
Set the account lockout policy to {accountLockout}.
Update password strength rules to {passwordStrength}.
GET /security/ciphers List enabled TLS ciphers · Gets the list of ciphers enabled on the cluster #
Ask an LLM
“Which ciphers are enabled on my cluster?”
“Are any weak ciphers still turned on?”
Tell an agent
List the ciphers enabled on the cluster.
Show the active cipher suites.
POST /security/ciphers Enable or disable cluster ciphers · Enable/Disable a list of ciphers on the cluster. #
Ask an LLM
“How do I disable specific ciphers on the cluster?”
“Does changing ciphers require a service restart to take effect?”
Tell an agent
Disable ciphers {ciphers} on the cluster.
Set cipher enablement to {enable} for {ciphers}.
GET /trusted-cas List trusted CA certificates · List all Certificates with cluster trust store #
Ask an LLM
“Which CA certificates are in the cluster trust store?”
“Can I look up trusted CAs by name?”
Tell an agent
List all trusted CA certificates.
Show trusted CAs named {names}.
POST /trusted-cas Add CA certificates to the trust store · Register CA Certificate to the cluster trust store #
Ask an LLM
“How do I add my internal CA to the cluster trust store?”
“Can I validate a CA certificate without actually importing it?”
Tell an agent
Register CA certificates {certificates} in the trust store.
Only validate CA certificates {certificates} without saving them.
GET /trusted-cas/{id} Get a trusted CA certificate · List the specified Certificate #
Ask an LLM
“What are the details of one trusted CA certificate?”
“When does a specific trusted CA expire?”
Tell an agent
Get trusted CA certificate {id}.
Show the trust store entry with id {id}.
DELETE /trusted-cas/{id} Remove a CA from the trust store · Unregister CA Certificate from the cluster trust store #
Ask an LLM
“How do I stop trusting a CA certificate on the cluster?”
“Will removing a trusted CA break connections that rely on it?”
Tell an agent destructive · confirm first
Unregister trusted CA {id}.
Remove CA certificate {id} from the trust store.
POST /trusted-cas/{id}/validate Validate a trusted CA certificate · Validate CA Certificate #
Ask an LLM
“Can I check whether a trusted CA certificate has expired or been revoked?”
“Is a CA already in the trust store still valid?”
Tell an agent
Validate trusted CA {id} for expiration and revocation.
Check if trust store certificate {id} is still valid.

Documentation

📖
Documentation
https://developer.cohesity.com/helios-api.html
📖
GettingStarted
https://developer.cohesity.com/docs/helios-getting-started
📖
APIReference
https://developer.cohesity.com/apidocs/versions/
📖
Documentation
https://developer.cohesity.com/apidocs/versions/
📖
APIReference
https://developers.cohesity.com/page/api-reference
📖
GettingStarted
https://developers.cohesity.com/docs/getting-started
📖
Documentation
https://developer.cohesity.com/apidocs/helios-reporting
📖
Documentation
https://developer.cohesity.com/apidocs/site-continuity

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/cohesity/refs/heads/main/openapi/cohesity-security-api-openapi.yml

Other Resources

🔗
Postman
https://api.cohesity.com/

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/cohesity:cohesity-security-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

cohesity-security-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  description: Cohesity API provides a RESTful interface to access the various data management operations on Cohesity cluster and Helios.
  title: Cohesity REST Security API
  version: '2.0'
servers:
- url: /v2
tags:


# --- truncated at 32 KB (36 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cohesity/refs/heads/main/openapi/cohesity-security-api-openapi.yml