Harness

Harness Frontend API

Endpoints that power the STO micro-frontend

GitHub OpenAPI

Operations 33

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /sto/api/v2/frontend/all-issues/filters List filter options for a project's security issues · Frontend#All issues filters #
Ask an LLM
“Which scanners, targets and severities can I filter a project's security issues by?”
“What filter values are available for the issues from my latest baseline scans?”
Tell an agent
Show the available issue filters for project {project}.
Get the filter options for the all-issues view of project {project} in org {org}.
GET /sto/api/v2/frontend/all-issues/issues List security issues from latest baseline scans · Frontend#All issues list #
Ask an LLM
“What security issues were found in my project's latest baseline scans?”
“Can I narrow the issue list to critical findings that are in the KEV catalog?”
Tell an agent
List baseline scan issues in project {project} with severity {severity}.
Page through issues from scanner {scanner} in project {project}, page {page}.
GET /sto/api/v2/frontend/all-issues/issues/{issueId} Get a security issue's baseline scan details · Frontend#All issues details #
Ask an LLM
“What are the full details of one security issue from the latest baseline scans?”
“Can I see which targets a single baseline issue shows up in?”
Tell an agent
Show baseline scan details for issue {issue} in project {project}.
Get issue {issue} details including exempted occurrences with status {exemption}.
GET /sto/api/v2/frontend/all-issues/issues/{issueId}/targets/{targetId} List an issue's occurrences on one target · Frontend#All issues occurrence details #
Ask an LLM
“Where exactly does a security issue occur on a specific scan target?”
“Can I page through the occurrences of one issue for a single target?”
Tell an agent
List occurrences of issue {issue} on target {target}.
Show page {page} of occurrences for issue {issue} on target {target} in project {project}.
GET /sto/api/v2/frontend/all-issues/v2/counts Count issues by severity and issue type · Frontend#All issues counts V2 #
Ask an LLM
“How many security issues does my project have per severity level?”
“Can I get issue counts broken down by issue type for the all-issues page?”
Tell an agent
Count issues by severity and type for project {project}.
Get severity and type counts for project {project} limited to scanner {scanner}.
GET /sto/api/v2/frontend/all-issues/v2/counts/total Get total issue and occurrence counts · Frontend#All issues totals V2 #
Ask an LLM
“What is the overall number of issues and occurrences in a project, ignoring filters?”
“How many total occurrences of security issues does my project have?”
Tell an agent
Give me the unfiltered total issue and occurrence count for project {project}.
Show grand totals of issues and occurrences in project {project}, org {org}.
GET /sto/api/v2/frontend/all-issues/v2/issues List project issues from the summary table · Frontend#All issues list V2 #
Ask an LLM
“Is there a faster, pre-aggregated way to list all of a project's security issues?”
“Can the v2 issues list filter by EPSS score and reachability?”
Tell an agent
List project {project} issues from the pre-aggregated summary, page {page}.
Use the v2 issues list to show issues with reachability {reach} in project {project}.
GET /sto/api/v2/frontend/all-issues/v2/issues/{issueId} Get issue details from the summary tables · Frontend#All issues details V2 #
Ask an LLM
“Can I fetch one issue's details from the pre-aggregated summary and detection data?”
“What does the v2 issue detail view return for a single finding?”
Tell an agent
Get v2 summary-table details for issue {issue} in project {project}.
Open the detection-table view of issue {issue}.
GET /sto/api/v2/frontend/all-issues/v2/trend Show daily issue trend by status · Frontend#All issues trend V2 #
Ask an LLM
“How have my project's open and resolved issue counts changed day by day?”
“Can I see the issue trend over the last 30 days for one scanner?”
Tell an agent
Show the daily issue status trend for project {project} over {days} days.
Chart daily issue counts by status for project {project} with severity {severity}.
GET /sto/api/v2/frontend/executions/trend Show finding trend across scans for a target · Frontend#Execution trend #
Ask an LLM
“How have severity counts changed across scans of one target variant?”
“Can I see the finding trend per execution for a specific branch or image?”
Tell an agent
Show the per-scan finding trend for target variant {variant} in project {project}.
Get severity counts per execution for variant {variant} over the last {days} days.
GET /sto/api/v2/frontend/exemption/{exemptionId}/issue-severity-change Preview severity change from an exemption · Frontend#Issue severity change #
Ask an LLM
“What happens to an issue's severity if I approve an occurrence-level exemption?”
“Will approving this exemption lower the issue's overall severity?”
Tell an agent
Preview the severity change for issue {issue} if exemption {exemption} is approved.
Check how exemption {exemption} would shift the severity of issue {issue} in scan {scan}.
GET /sto/api/v2/frontend/exemption/{exemptionId}/targets List targets impacted by an exemption · Frontend#Impacted targets for exemption #
Ask an LLM
“Which scan targets does a given exemption apply to?”
“Can I search the targets affected by one exemption?”
Tell an agent
List the targets impacted by exemption {exemption}.
Search targets affected by exemption {exemption} for {text}.
POST /sto/api/v2/frontend/exemptions Review exemptions across the account · Frontend#Global exemptions #
Ask an LLM
“Which exemption requests are pending review across all my projects?”
“Can I filter account-wide exemptions by who approved or requested them?”
Tell an agent
List global exemptions with status {status} for account {account}.
Show account-wide exemptions with status {status} requested by {user}.
POST /sto/api/v2/frontend/exemptions/filters List filter options for exemptions · Frontend#Exemptions filters #
Ask an LLM
“What filter values can I use when reviewing exemptions?”
“Which requesters, scanners and pipelines appear in the exemption filters?”
Tell an agent
Get the exemption filter options for account {account}.
Show exemption filter values scoped to org {org}.
GET /sto/api/v2/frontend/expiring-exemptions/{executionId} List exemptions about to expire for an execution · Frontend#Expiring exemptions #
Ask an LLM
“Which exempted issues in a pipeline run are going to expire soon?”
“Can I see exemptions expiring within the next few days for an execution?”
Tell an agent
List issues whose exemptions expire soon for execution {execution}.
Show exemptions in execution {execution} expiring within {days} days.
GET /sto/api/v2/frontend/issue-counts Count active issues for pipeline executions · Frontend#Execution issue counts #
Ask an LLM
“How many active security issues did my pipeline runs produce?”
“Can I get issue counts for several pipeline executions at once?”
Tell an agent
Count active security issues for executions {executions} in project {project}.
Get active issue totals for pipeline execution {executions}.
GET /sto/api/v2/frontend/issue-exemption/{exemptionId} Get the issue behind an exemption · Frontend#Issue for exemption #
Ask an LLM
“What issue does a specific exemption cover?”
“Can I view the details of one issue exemption and its targets?”
Tell an agent
Show the issue exemption {exemption}.
Get exemption {exemption} limited to target {target}.
GET /sto/api/v2/frontend/issues/{issueId}/occurrence/{occurrenceInternalId}/dataflow Get dataflow for an issue occurrence · Get dataflow for an occurrence #
Ask an LLM
“How does tainted data flow through the code for one vulnerability occurrence?”
“Can I load the source-to-sink dataflow for a single occurrence separately?”
Tell an agent
Get the dataflow for occurrence {occurrence} of issue {issue}.
Show source-to-sink trace for issue {issue} occurrence {occurrence} in project {project}.
POST /sto/api/v2/frontend/licenses/qwiet/trial Start a Qwiet trial license · Provision Qwiet trial license #
Ask an LLM
“Can I start a Qwiet trial for my account?”
“What happens to my STO license when a Qwiet trial is provisioned?”
Tell an agent
Provision a Qwiet trial license for account {account}.
Turn on the Qwiet trial for account {account}.
GET /sto/api/v2/frontend/metrics/licenseUsage Get Qwiet license usage · Get Qwiet license usage #
Ask an LLM
“How much of our Qwiet license are we using?”
“Where can I see Qwiet license usage metrics for the account?”
Tell an agent
Show Qwiet license usage for account {account}.
Report current Qwiet license consumption for account {account}.
GET /sto/api/v2/frontend/overview/baselines Get baseline executions for the overview · Frontend#Overview baselines #
Ask an LLM
“Which baseline scan executions feed my project's security overview?”
“What baseline data does the STO overview page use?”
Tell an agent
Get overview baseline execution data for project {project}.
Show the latest baseline runs behind the overview of project {project}.
GET /sto/api/v2/frontend/overview/historical-counts Get historical issue counts for the overview · Frontend#Overview historical counts #
Ask an LLM
“How many issues did my project have over the past few weeks?”
“Can I get historical issue numbers for the security overview dashboard?”
Tell an agent
Get historical issue counts for project {project} over {days} days.
Show issue history for the overview of project {project}.
GET /sto/api/v2/frontend/pipeline-security/issues List new and existing issues for a pipeline run · Frontend#Pipeline security issues #
Ask an LLM
“What security issues did a specific pipeline execution find, split into new and existing?”
“Can I page new issues and existing issues separately for one pipeline run?”
Tell an agent
List new and existing security issues for execution {execution}.
Show pipeline run {execution} issues from step {step}, excluding exemptions.
GET /sto/api/v2/frontend/pipeline-security/issues/csv Export a pipeline run's issues for CSV · Export security issues data #
Ask an LLM
“Can I export the security issues from a pipeline run as a CSV?”
“What data do I get when downloading pipeline security issues for a spreadsheet?”
Tell an agent
Export security issues from execution {execution} for CSV.
Download a CSV of severity {severity} issues from pipeline run {execution}.
GET /sto/api/v2/frontend/pipeline-security/steps List security steps in a pipeline run · Frontend#Pipeline security steps #
Ask an LLM
“Which scan steps ran in a given pipeline execution?”
“What step data does the pipeline security view show?”
Tell an agent
List the security scan steps for execution {execution}.
Show step data for pipeline execution {execution} in project {project}.
GET /sto/api/v2/frontend/pipeline-security/v2/issues List a pipeline run's issues in one combined list · Frontend#Pipeline security issues V2 #
Ask an LLM
“Can I get one combined list of new-then-existing issues for a pipeline run?”
“Is there a single paginated pipeline issue list that also covers the remediation agent tab?”
Tell an agent
Give me the combined new-first issue list for execution {execution}.
Show combined pipeline issues for execution {execution} with detection type {type}.
GET /sto/api/v2/frontend/remediation-agent/activities List remediation agent PR activity for a run · Frontend#Remediation agent activities #
Ask an LLM
“What pull requests has the remediation agent opened for a pipeline execution?”
“Can I see the remediation agent's activity for the scans in one run?”
Tell an agent
List remediation agent PR activities for execution {execution}.
Show the next {count} remediation agent activities for execution {execution}.
GET /sto/api/v2/frontend/remediation/trend Show active remediation trend · Frontend#Remediation trend #
Ask an LLM
“How is active remediation trending across my project's scans?”
“Can I see the remediation trend for just one target variant?”
Tell an agent
Show the project-wide active remediation trend for project {project}.
Get the remediation trend for target variant {variant} over {days} days.
GET /sto/api/v2/frontend/security-review Get exemptions for a project's security review · Frontend#Security review #
Ask an LLM
“Which exemptions in my project are waiting for security review?”
“Can I search the project-level security review queue by status?”
Tell an agent
Show the security review list with status {status} for project {project}.
Search project {project} security review items with status {status} for {text}.
GET /sto/api/v2/frontend/test-targets List test targets in a project · Frontend#Test targets #
Ask an LLM
“Which test targets are being scanned in my project?”
“Can I search test targets and see their variants?”
Tell an agent
List test targets for project {project}.
Find test targets in project {project} named {text}.
PUT /sto/api/v2/frontend/test-targets/{targetId}/variants/status Update statuses of test target variants · Frontend#Update test target variants #
Ask an LLM
“Can I change the status of several variants of a test target at once?”
“How can I mark a branch variant of a target as no longer tracked?”
Tell an agent
Update variant statuses for test target {target} to {variants}.
Set the variant statuses on target {target} in project {project}.
POST /sto/api/v2/frontend/tickets Create or link a Jira ticket for an issue · Frontend#Create ticket for issue #
Ask an LLM
“Can I open a Jira ticket for a security issue straight from STO?”
“Is it possible to link an existing Jira ticket to an issue instead of creating one?”
Tell an agent
Create a Jira ticket in project {jira} for issue {issue} of type {type}.
File a Jira ticket titled {title} in {jira} for issue {issue}.
POST /sto/api/v2/frontend/tickets/occurrence Create a Jira ticket for one occurrence · Frontend#Create ticket for occurrence #
Ask an LLM
“Can I raise a Jira ticket for just one occurrence of an issue rather than the whole issue?”
“What does a ticket for a single vulnerability occurrence include?”
Tell an agent
Create a Jira ticket in {jira} for occurrence {occurrence} of issue {issue} on target {target}.
Open a single-occurrence ticket for occurrence {occurrence} with notes {notes}.

Documentation

📖
Documentation
https://apidocs.harness.io
📖
APIReference
https://apidocs.harness.io
📖
GettingStarted
https://developer.harness.io/docs/platform/automation/api/api-quickstart/
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/authentication/harness-authentication.yml
📖
RateLimits
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/rate-limits/harness-rate-limits.yml

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/openapi/harness-frontend-api-openapi.yml

Other Resources

🔗
OAuthScopes
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/scopes/harness-scopes.yml
🔗
ErrorCatalog
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/errors/harness-error-codes.yml
🔗
Conventions
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/conventions/harness-conventions.yml
🔗
Idempotency
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/conventions/harness-conventions.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/harness:harness-frontend-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

harness-frontend-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Harness Frontend API
  version: '1.0'
  description: The Harness Software Delivery Platform uses OpenAPI Specification v3.0.
  contact:
    name: API Support
    email: contact@harness.io
    url: https://harness.io/
  x-logo:
    url: https://mma.prnewswire.com/media/779232/Harnes_logo_horizontal.jpg?p=facebook
    altText: Harness
  termsOfService: https://harness.io/terms-of-use/
servers:
- url: https://app.harness.io
  description: Harness host URL
- url: https://{vanity}
  description: Vanity URL
  variables:
    vanity:
      default: app.harness.io
security:
- x-api-key: []
tags:


# --- truncated at 32 KB (748 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/openapi/harness-frontend-api-openapi.yml