Harness

Harness Exemptions API

Access and modify Exemptions to Security Issues

GitHub OpenAPI

Operations 22

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /sto/api/v2/exemptions List security testing issue exemptions · Exemptions#List exemptions #
Ask an LLM
“Which STO security issue exemptions exist in my Harness account?”
“Can I page through all the vulnerability exemptions scoped to one project?”
Tell an agent
List the STO issue exemptions in account {account}.
Show page {page} of STO exemptions for project {project} in org {org}, {pageSize} per page.
POST /sto/api/v2/exemptions Request an exemption for a security issue · Exemptions#Create exemption #
Ask an LLM
“How do I request an exemption for a vulnerability that STO flagged?”
“Can an STO issue exemption expire automatically after a set date?”
Tell an agent
Request a {type} exemption for STO issue {issueId} in project {project} because {reason}.
Exempt issue {issueId} in org {org}, project {project}, expiring at {expiration}.
DELETE /sto/api/v2/exemptions/{id} Delete a security issue exemption · Exemptions#Delete exemption #
Ask an LLM
“How do I remove an STO exemption so the issue blocks pipelines again?”
“Can I delete a security issue exemption that is no longer needed?”
Tell an agent destructive · confirm first
Delete STO exemption {id}.
Remove STO exemption {id} from account {account}.
GET /sto/api/v2/exemptions/{id} Look up one security issue exemption · Exemptions#Find exemption by id #
Ask an LLM
“What are the details and status of a single STO exemption by its ID?”
“Can I fetch an STO exemption regardless of which scope it was created in?”
Tell an agent
Get STO exemption {id} in account {account}.
Look up STO exemption {id} as seen by pipeline execution {executionId}.
PUT /sto/api/v2/exemptions/{id} Edit an existing security issue exemption · Exemptions#Update exemption #
Ask an LLM
“Can I change the reason or expiration on an STO exemption I already requested?”
“How do I edit an existing security issue exemption request?”
Tell an agent
Update STO exemption {id} to expire at {expiration}.
Change the reason on STO exemption {id} to {reason}.
PUT /sto/api/v2/exemptions/{id}/{action} Approve or reject a security issue exemption · Exemptions#Approve exemption #
Ask an LLM
“How do I approve a pending STO exemption request?”
“Can I reject a security issue exemption and leave a comment explaining why?”
Tell an agent
Apply action {action} to STO exemption {id}.
Take action {action} on STO exemption {id} with comment {comment}.
PUT /sto/api/v2/exemptions/{id}/promote Promote an exemption to a higher scope · Exemptions#Promote exemption #
Ask an LLM
“Can I promote a project-level STO exemption so it applies across the org or account?”
“What happens when I widen an issue exemption to a higher scope?”
Tell an agent
Promote STO exemption {id} to a higher scope.
Promote STO exemption {id} with the note {comment}.
POST /sto/api/v2/exemptions/bulk Create many security issue exemptions at once · Bulk create exemptions #
Ask an LLM
“Can I exempt many STO issues in a single request?”
“What happens to a bulk exemption batch if one item violates an exemption rule?”
Tell an agent
Bulk-create {type} exemptions for these issues {items} in project {project} with reason {reason}.
Exempt the batch of issues {items} in org {org}, project {project}, all or none.
GET /sto/api/v2/exemptions/issue/{issueId} Find the exemption that applies to an issue · Get exemption for issue #
Ask an LLM
“Which exemption actually applies to this STO issue across account, org and project?”
“Is a given security issue currently covered by any exemption?”
Tell an agent
Find the highest-priority exemption for issue {issueId}.
Check whether issue {issueId} in project {project} is exempted.
GET /sto/api/v2/exemptions/issue/{issueId}/history Show the exemption history timeline for an issue · List exemption history for issue #
Ask an LLM
“Who requested, approved or rejected exemptions on this security issue over time?”
“Can I filter an issue's exemption timeline by pipeline or target?”
Tell an agent
Show the exemption history for issue {issueId}.
List exemption history events for issue {issueId} in pipeline {pipelineId}.
GET /sto/api/v2/exemptions/issue/{issueId}/history/export Export an issue's exemption history as CSV · Export exemption history for issue as CSV #
Ask an LLM
“Can I download the full exemption history of a security issue as a CSV file?”
“Is there a way to export an issue's exemption audit trail without paging?”
Tell an agent
Export the exemption history for issue {issueId} to CSV.
Download a CSV of exemption events for issue {issueId} on target {targetId}.
GET /v1/orgs/{org}/projects/{project}/exemptions List component exemptions in a project · List exemptions for project #
Ask an LLM
“Which supply chain component exemptions are set up in my Harness project?”
“Can I filter a project's component exemptions by status or artifact?”
Tell an agent
List component exemptions in project {project} of org {org}.
Show {status} component exemptions in project {project}, org {org}.
POST /v1/orgs/{org}/projects/{project}/exemptions Exempt a component across a project · Create exemption for project #
Ask an LLM
“How do I exempt an open source component version for every artifact in a project?”
“Can a project-wide component exemption be limited to a duration?”
Tell an agent
Create a project-wide exemption for component {component_name} {component_version} in project {project}, org {org}.
Exempt component {component_name} across project {project} in org {org} for {exemption_duration} because {reason}.
POST /v1/orgs/{org}/projects/{project}/artifacts/{artifact}/exemptions Exempt a component for one artifact · Create exemption for artifact #
Ask an LLM
“Can I exempt a component only for a single artifact instead of the whole project?”
“How do I add a component exemption scoped to one artifact?”
Tell an agent
Create an exemption for component {component_name} on artifact {artifact} in project {project}, org {org}.
Exempt {component_name} version {component_version} only on artifact {artifact} in org {org}, project {project}.
GET /v1/orgs/{org}/projects/{project}/exemptions/{exemption} Get a project-level component exemption · Get exemption for project #
Ask an LLM
“What are the details of one project-wide component exemption?”
“Can I see the reason and duration on a project component exemption?”
Tell an agent
Get project component exemption {exemption} in project {project}, org {org}.
Show the project-level exemption {exemption} for org {org}, project {project}.
PUT /v1/orgs/{org}/projects/{project}/exemptions/{exemption} Edit a project-level component exemption · Update exemption for project #
Ask an LLM
“Can I change the component version range on a project-wide exemption?”
“How do I extend the duration of a project component exemption?”
Tell an agent
Update project exemption {exemption} in project {project}, org {org} to last {exemption_duration}.
Change project exemption {exemption} in org {org}, project {project} to cover version {component_version}.
DELETE /v1/orgs/{org}/projects/{project}/exemptions/{exemption} Delete a project-level component exemption · Delete exemption for project #
Ask an LLM
“How do I remove a project-wide component exemption?”
“Can I delete a component exemption that applies to a whole project?”
Tell an agent destructive · confirm first
Delete project component exemption {exemption} from project {project}, org {org}.
Remove the project-level exemption {exemption} in org {org}, project {project}.
GET /v1/orgs/{org}/projects/{project}/artifacts/{artifact}/exemptions/{exemption} Get an artifact-level component exemption · Get exemption for artifact #
Ask an LLM
“What does a component exemption on a specific artifact look like?”
“Can I check the status of an exemption tied to one artifact?”
Tell an agent
Get exemption {exemption} on artifact {artifact} in project {project}, org {org}.
Show artifact {artifact}'s exemption {exemption} in org {org}, project {project}.
PUT /v1/orgs/{org}/projects/{project}/artifacts/{artifact}/exemptions/{exemption} Edit an artifact-level component exemption · Update exemption for artifact #
Ask an LLM
“Can I change the reason on a component exemption tied to one artifact?”
“How do I modify an exemption that only applies to a single artifact?”
Tell an agent
Update exemption {exemption} on artifact {artifact} in project {project}, org {org} with reason {reason}.
Set artifact {artifact}'s exemption {exemption} in org {org}, project {project} to last {exemption_duration}.
DELETE /v1/orgs/{org}/projects/{project}/artifacts/{artifact}/exemptions/{exemption} Delete an artifact-level component exemption · Delete exemption for artifact #
Ask an LLM
“How do I remove a component exemption from a single artifact?”
“Can I delete just one artifact's exemption without touching project-wide ones?”
Tell an agent destructive · confirm first
Delete exemption {exemption} on artifact {artifact} in project {project}, org {org}.
Remove artifact {artifact}'s component exemption {exemption} from org {org}, project {project}.
PUT /v1/orgs/{org}/projects/{project}/exemptions/{exemption}/review Review a project-level component exemption · Review exemption for project #
Ask an LLM
“How do I approve or reject a project-wide component exemption request?”
“Can I leave a review comment when deciding on a project exemption?”
Tell an agent
Review project exemption {exemption} in project {project}, org {org} and set it to {exemption_status}.
Mark project exemption {exemption} in org {org}, project {project} as {exemption_status} with comment {review_comment}.
PUT /v1/orgs/{org}/projects/{project}/artifacts/{artifact}/exemptions/{exemption}/review Review an artifact-level component exemption · Review exemption for artifact #
Ask an LLM
“How do I approve or reject a component exemption requested for one artifact?”
“Can a reviewer comment on an artifact-specific exemption decision?”
Tell an agent
Review exemption {exemption} on artifact {artifact} in project {project}, org {org} as {exemption_status}.
Set artifact {artifact}'s exemption {exemption} in org {org}, project {project} to {exemption_status} noting {review_comment}.

Documentation

📖
Documentation
https://apidocs.harness.io
📖
APIReference
https://apidocs.harness.io
📖
GettingStarted
https://developer.harness.io/docs/platform/automation/api/api-quickstart/
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/authentication/harness-authentication.yml
📖
RateLimits
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/rate-limits/harness-rate-limits.yml

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/openapi/harness-exemptions-api-openapi.yml

Other Resources

🔗
OAuthScopes
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/scopes/harness-scopes.yml
🔗
ErrorCatalog
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/errors/harness-error-codes.yml
🔗
Conventions
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/conventions/harness-conventions.yml
🔗
Idempotency
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/conventions/harness-conventions.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/harness:harness-exemptions-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

harness-exemptions-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Harness Exemptions API
  version: '1.0'
  description: The Harness Software Delivery Platform uses OpenAPI Specification v3.0.
  contact:
    name: API Support
    email: contact@harness.io
    url: https://harness.io/
  x-logo:
    url: https://mma.prnewswire.com/media/779232/Harnes_logo_horizontal.jpg?p=facebook
    altText: Harness
  termsOfService: https://harness.io/terms-of-use/
servers:
- url: https://app.harness.io
  description: Harness host URL
- url: https://{vanity}
  description: Vanity URL
  variables:
    vanity:
      default: app.harness.io
security:
- x-api-key: []
tags:


# --- truncated at 32 KB (136 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/openapi/harness-exemptions-api-openapi.yml