Harness

Harness Orchestration V3 API

The orchestrationV3 API from Harness — 2 operation(s) for orchestrationv3.

GitHub OpenAPI

Operations 2

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /v2/orgs/{org}/projects/{project}/orchestration/{orchestration}/sbom-upload Upload an SBOM for an orchestration run · Upload SBOM #
Ask an LLM
“How do I upload an SBOM file generated during a supply-chain orchestration run?”
“Can I name the SBOM I attach to an orchestration?”
Tell an agent
Upload SBOM {sbom} to orchestration {orchestration} in {org}/{project}.
Attach SBOM file named {sbom_name} to orchestration {orchestration}.
POST /v2/orgs/{org}/projects/{project}/orchestration/{orchestration} Save an SBOM orchestration record · Save Orchestration #
Ask an LLM
“How is an orchestration's artifact, SBOM metadata and attestation saved?”
“Can I include the component list when saving an orchestration?”
Tell an agent
Save orchestration {orchestration} in {org}/{project} for artifact {artifact}.
Record attestation {attestation} and SBOM metadata {sbom_metadata} on orchestration {orchestration}.

Documentation

📖
Documentation
https://apidocs.harness.io
📖
APIReference
https://apidocs.harness.io
📖
GettingStarted
https://developer.harness.io/docs/platform/automation/api/api-quickstart/
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/authentication/harness-authentication.yml
📖
RateLimits
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/rate-limits/harness-rate-limits.yml

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/openapi/harness-orchestrationv3-api-openapi.yml

Other Resources

🔗
OAuthScopes
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/scopes/harness-scopes.yml
🔗
ErrorCatalog
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/errors/harness-error-codes.yml
🔗
Conventions
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/conventions/harness-conventions.yml
🔗
Idempotency
https://raw.githubusercontent.com/api-evangelist/harness/refs/heads/main/conventions/harness-conventions.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/harness:harness-orchestrationv3-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

harness-orchestrationv3-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Harness Orchestration V3 API
  version: '1.0'
  description: The Harness Software Delivery Platform uses OpenAPI Specification v3.0.
  contact:
    name: API Support
    email: contact@harness.io
    url: https://harness.io/
  x-logo:
    url: https://mma.prnewswire.com/media/779232/Harnes_logo_horizontal.jpg?p=facebook
    altText: Harness
  termsOfService: https://harness.io/terms-of-use/
servers:
- url: https://app.harness.io
  description: Harness host URL
- url: https://{vanity}
  description: Vanity URL
  variables:
    vanity:
      default: app.harness.io
security:
- x-api-key: []
tags:
- name: orchestrationV3
paths:
  /v2/orgs/{org}/projects/{project}/orchestration/{orchestration}/sbom-upload:
    parameters:
    - $ref: '#/components/parameters/OrgParam1'
    - $ref: '#/components/parameters/ProjectParam1'
    - $ref: '#/components/parameters/OrchestrationId'
    servers: []
    post:
      summary: Upload SBOM
      tags:
      - orchestrationV3
      responses:
        '201':
          description: Shared Response
      operationId: uploadSbomV2
      x-stoplight:
        id: nu31o2ljat7wm
      description: Upload SBOM for an orchestration run
      parameters:
      - $ref: '#/components/parameters/AccountHeader6'
      requestBody:
        content:
          multipart/form-data:
            schema:
              type: object
              required:
              - sbom
              - execution_context
              properties:
                sbom:
                  type: string
                  x-stoplight:
                    id: q6xx2x2hw7izu
                  format: binary
                  writeOnly: true
                execution_context:
                  $ref: '#/components/schemas/ExecutionDetail'
                sbom_name:
                  type: string
                  x-stoplight:
                    id: x2y8o4pdp79wh
      security:
      - x-api-key: []
  /v2/orgs/{org}/projects/{project}/orchestration/{orchestration}:
    parameters:
    - $ref: '#/components/parameters/OrgParam1'
    - $ref: '#/components/parameters/ProjectParam1'
    - $ref: '#/components/parameters/OrchestrationId'
    post:
      summary: Save Orchestration
      tags:
      - orchestrationV3
      responses:
        '201':
          $ref: '#/components/responses/PluginResponseBody'
        '400':
          description: Bad Request
      operationId: saveOrchestrationV2
      x-stoplight:
        id: z435nplrowm4h
      requestBody:
        $ref: '#/components/requestBodies/SaveOrchestrationRequestBodyV2'
      parameters:
      - $ref: '#/components/parameters/AccountHeader6'
      security:
      - x-api-key: []
components:
  responses:
    PluginResponseBody:
      description: Example response
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/PluginResponseBody'
  schemas:
    SaveOrchestrationRequestV2:
      title: SaveOrchestrationRequest
      x-stoplight:
        id: 5tb5gd8m5ehto
      type: object
      required:
      - artifact
      - sbom_metadata
      - attestation
      properties:
        components:
          type: array
          x-stoplight:
            id: x8wtamg34sbym
          items:
            $ref: '#/components/schemas/SbomComponentRequestDTO'
        artifact:
          $ref: '#/components/schemas/Artifact1'
        sbom_metadata:
          $ref: '#/components/schemas/SbomMetadataV2'
        attestation:
          $ref: '#/components/schemas/Attestation'
        execution_context:
          $ref: '#/components/schemas/ExecutionDetail'
    RepositoryPlatform:
      type: string
      title: RepositoryPlatform
      x-stoplight:
        id: prybalroyw6dc
      enum:
      - HARNESS
      - GITHUB
      - BITBUCKET
      - GITLAB
      - GIT
      - AZURE
    SbomMetadataV2:
      title: SbomMetadataV2
      x-stoplight:
        id: 4na922okidtvc
      type: object
      required:
      - name
      - format
      - tool_name
      - tool_version
      properties:
        name:
          type: string
          x-stoplight:
            id: 0160bbgwts3sz
        format:
          type: string
          minLength: 3
          example: spdx-json
        tool_name:
          type: string
          minLength: 3
          example: synk
          x-stoplight:
            id: ic4qf7a3stbw7
        tool_version:
          type: string
          x-stoplight:
            id: 1mfkoo8p7i071
        created:
          type: number
          x-stoplight:
            id: ldh7rwijoj89o
        sbom_version:
          type: string
          x-stoplight:
            id: feovw69zekn4x
        tool_vendor:
          type: string
          x-stoplight:
            id: cbdqudq2dotry
    Artifact1:
      title: Artifact
      x-go-name: ArtifactListItem
      x-stoplight:
        id: 13qkvpww6x2ku
      type: object
      x-examples: {}
      required:
      - type
      - name
      - registry_url
      properties:
        id:
          type: string
          description: id of the artifact
          example: 089855ea-f90e-4bea-a5c9-b5ddf85d3180
        type:
          type: string
          description: type of the artifact
          enum:
          - image
          - repository
          default: image
          example: image
        name:
          type: string
          description: name of the artifact
          example: harness/image
        tag:
          type: string
          description: tag of the artifact
          default: latest
          example: latest
        registry_url:
          type: string
          description: url of the artifact
          example: https://console.cloud.google.com/gcr/images/imageName
        url:
          type: string
          x-stoplight:
            id: 2gcc89tfmislv
        variant:
          $ref: '#/components/schemas/ArtifactVariant'
        digest:
          type: string
          description: digest of the artifact
          example: sha256:1234567890
        metadata:
          type: object
          additionalProperties: true
          x-stoplight:
            id: bcmiu856m2sf8
        repository_platform:
          $ref: '#/components/schemas/RepositoryPlatform'
    GithubExecutionDetail:
      title: GithubExecutionDetail
      x-stoplight:
        id: nfcbibnr1z2rw
      type: object
      properties:
        repository:
          type: string
          x-stoplight:
            id: sac861lasuewn
        github_action:
          type: string
          x-stoplight:
            id: l8azkn1th708h
        action_path:
          type: string
          x-stoplight:
            id: twcllxr8bibkc
        job_id:
          type: string
          x-stoplight:
            id: gxvhjwmosdutz
        run_id:
          type: string
          x-stoplight:
            id: cunrcn7ohnpy2
        workflow_ref:
          type: string
          x-stoplight:
            id: gnclwe27klokp
        runner_detail:
          $ref: '#/components/schemas/GithubRunner'
      description: Github Pipeline Execution Details
    ExecutionDetail:
      type: object
      required:
      - type
      properties:
        type:
          $ref: '#/components/schemas/ExecutionType'
        github:
          $ref: '#/components/schemas/GithubExecutionDetail'
        harness:
          $ref: '#/components/schemas/HarnessExecutionDetail'
    Attestation:
      title: Attestation
      x-stoplight:
        id: rzr5mk8z847jg
      type: object
      properties:
        is_attested:
          type: boolean
          default: false
          description: is the sbom attested or not
        url:
          type: string
          description: url of the attested file
          example: https://storage.googleapis.com/sbom_store_public/kmpySmUISimoRrJL6NL73w/default/SSCS_CI_Plugin_Demo/CKO_SSCA_Pipeline/Build/39/q940CvjoQj-GEInJQfWiwg/sbom
    ExecutionType:
      type: string
      enum:
      - harness
      - github
    GithubRunner:
      title: GithubRunner
      x-stoplight:
        id: 32axq2gn4gemv
      type: object
      properties:
        name:
          type: string
          x-stoplight:
            id: x0aeloqpvaybd
        account_id:
          type: string
          x-stoplight:
            id: aod8pc43fmjbt
    LayerType:
      title: LayerType
      enum:
      - BASE
      - APP
      - DISTRO
      x-stoplight:
        id: 151c5cf8ekave
    SbomComponentRequestDTO:
      title: NormalizedSbomComponentDTO
      x-stoplight:
        id: w7dtx3sur4642
      type: object
      description: Normalized SBOM Component Details
      properties:
        tags:
          type: array
          items:
            type: string
        package_id:
          type: string
        package_name:
          type: string
        package_description:
          type: string
        package_license:
          type: array
          items:
            type: string
        package_source_info:
          type: string
        package_version:
          type: string
        package_originator_name:
          type: string
        originator_type:
          type: string
        package_type:
          type: string
        package_cpe:
          type: string
        package_properties:
          type: string
        package_manager:
          type: string
        package_namespace:
          type: string
        major_version:
          type: number
        minor_version:
          type: number
        patch_version:
          type: number
        purl:
          type: string
        language:
          type: string
        filter_tags:
          type: array
          items:
            $ref: '#/components/schemas/LayerType'
    PluginResponseBody:
      title: PluginResponseBody
      type: object
      required:
      - source_id
      - artifact
      - response_url
      properties:
        source_id:
          type: string
          x-stoplight:
            id: itkxv1ghux6aa
        artifact:
          type: object
          x-stoplight:
            id: ysaq85xiuzjsw
          properties:
            id:
              type: string
              x-stoplight:
                id: sgyd78hu7w5gl
            name:
              type: string
              x-stoplight:
                id: khrj2i162jh3x
            url:
              type: string
              x-stoplight:
                id: zgc35mjt90crt
        response_url:
          type: string
          x-stoplight:
            id: uadidz06nvmyn
    HarnessExecutionDetail:
      title: HarnessExecutionDetail
      x-stoplight:
        id: 26kpn09zundb0
      type: object
      properties:
        org:
          type: string
          x-stoplight:
            id: zf78rh1u21y55
        project:
          type: string
          x-stoplight:
            id: lghyhop0hsg0f
        pipeline_execution_id:
          type: string
          x-stoplight:
            id: svsw1myd4slwa
        pipeline_id:
          type: string
          x-stoplight:
            id: 6ms1cohmjf8rv
        pipeline_name:
          type: string
          x-stoplight:
            id: qecka5f2dfvxx
        sequence_id:
          type: string
          x-stoplight:
            id: tvb3c7trq28pt
        step_id:
          type: string
          x-stoplight:
            id: bj8ul3cpt9061
        step_execution_id:
          type: string
          x-stoplight:
            id: eyon9kxjzpuu5
        step_name:
          type: string
          x-stoplight:
            id: li446ik3qfg8l
        stage_id:
          type: string
          x-stoplight:
            id: uk4e6msb1annk
        stage_execution_id:
          type: string
          x-stoplight:
            id: ltrcdcpqky4rv
        stage_name:
          type: string
          x-stoplight:
            id: n27q5wlhtrd65
        stage_type:
          type: string
          x-stoplight:
            id: 22ha61i5fiwzc
          description: Stage type in which the step executed
        runner_detail:
          $ref: '#/components/schemas/HarnessRunner'
      description: Harness Pipeline Execution Details
    ArtifactVariant:
      title: ArtifactVariant
      x-stoplight:
        id: uyb3jwhgs9wjh
      type: object
      properties:
        type:
          type: string
          x-stoplight:
            id: 2r8lmxejmwqbf
          enum:
          - tag
          - branch
          - gitTag
          - commit
          description: type of the variant of the artifact.
        value:
          type: string
          x-stoplight:
            id: hd1p3s7bugn88
          description: Value of the variant of the artifact.
    HarnessRunner:
      title: HarnessRunner
      x-stoplight:
        id: vfsaqcya7qwfx
      type: object
      properties:
        trigger_type:
          type: string
          x-stoplight:
            id: rzkmd5bqoc9r9
        trigger_by_id:
          type: string
          x-stoplight:
            id: b36ytjxzv2yq6
        trigger_by_name:
          type: string
          x-stoplight:
            id: a7g4t02vts8gf
  requestBodies:
    SaveOrchestrationRequestBodyV2:
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/SaveOrchestrationRequestV2'
  parameters:
    OrchestrationId:
      name: orchestration
      in: path
      required: true
      schema:
        type: string
      description: Harness Pipeline Execution ID
    ProjectParam1:
      in: path
      required: true
      schema:
        type: string
      description: Harness project ID
      name: project
    OrgParam1:
      name: org
      in: path
      required: true
      schema:
        type: string
      description: Harness organization ID
    AccountHeader6:
      name: Harness-Account
      in: header
      required: true
      schema:
        type: string
      description: Identifier field of the account the resource is scoped to. This is required for Authorization methods other than the x-api-key header. If you are using the x-api-key header, this can be skipped.
  securitySchemes:
    x-api-key:
      name: x-api-key
      type: apiKey
      in: header
      description: API key is a token provided while making the API calls. This is used to authenticate the client at the exposed endpoint.
externalDocs:
  description: Find out more about Swagger
  url: http://swagger.io
x-stoplight:
  id: oc91t4vrfnjyi
x-tagGroups:
- name: Organizations
  tags:
  - Organization
- name: Projects
  tags:
  - Org Project
  - Project
- name: Secrets
  tags:
  - Account Secret
  - Org Secret
  - Project Secret
  - Secrets
- name: Connectors
  tags:
  - Account Connector
  - Org Connector
  - Project Connector
  - Connectors
  - GoogleSecretManagerConnector
- name: Roles
  tags:
  - Account Roles
  - Organization Roles
  - Project Roles
  - Roles
- name: Resource Groups
  tags:
  - Account Resource Groups
  - Organization Resource Groups
  - Project Resource Groups
  - Filter Resource Groups
  - Harness Resource Group
  - Zendesk
- name: Role Assignments
  tags:
  - Account Role Assignments
  - Org Role Assignments
  - Project Role Assignments
  - Role Assignments
- name: Platform
  tags:
  - Access Control List
  - Account Banner
  - Account Banner
  - Account Licensed Modules
  - Account License Type
  - Account Webhooks
  - AccountSetting
  - Accounts
  - Analyze Account Access Policy
  - Analyze Organization Access Policy
  - Analyze Project Access Policy
  - ApiKey
  - Audit
  - AuditFilters
  - Authentication Settings
  - Canny
  - Devops Essentials License Data By Account
  - EULA
  - Filter
  - Harness Resource Type
  - Invite
  - IP Allowlist
  - Nextgen Ldap
  - Notification Channels
  - Notification Rules
  - OIDC
  - Oidc-Access-Token
  - Oidc-ID-Token
  - Org Webhooks
  - Permissions
  - Project Webhooks
  - Secret Managers
  - Service Account
  - Setting
  - SMTP
  - Source Code Manager
  - Token
  - User
  - User Group
  - Variables
- name: Delegate
  tags:
  - Agent mTLS Endpoint Management
  - Delegate Download Resource
  - Delegate Group Tags Resource
  - Delegate Setup Resource
  - Delegate Token Resource
- name: Pipelines
  tags:
  - Pipelines
  - Input Sets
  - Approvals
  - Pipeline Execution
  - Pipeline Dashboard
  - Pipeline Input Set
  - Pipeline
  - Pipeline Execution Details
  - Pipeline Execute
  - Pipeline Refresh
  - Pipeline data retention
  - Triggers
  - TriggersEvents
  - Webhook Triggers
  - Webhook Event Handler
  - DryRunPipeline
- name: Artifact Registry
  tags:
  - Registries
  - Artifacts
  - Docker Artifacts
  - Helm Artifacts
  - quarantine
  - Webhooks
  - Spaces
  - Replication
  - Registry V3 - Registries
  - Registry V3 - Packages
  - Registry V3 - Versions
  - Registry V3 - Files
  - Registry V3 - Metadata
  - Registry V3 - Firewall
  - Registry V3 - Transfer
- name: Database DevOps
  tags:
  - Database Schema
  - Database Instance
  - Deployed State
  - Execution Config
  - Migration State
- name: CD
  tags:
  - K8s Release Service Mapping
  - CustomDeployment
  - Environments
  - EnvironmentGroup
  - Infrastructures
  - Usage
  - File Store
  - Service Dashboard
  - ServiceOverrides
  - Rollback
  - tas
- name: Deployment Freeze
  tags:
  - Freeze CRUD
  - Freeze Evaluation
  - Freeze Schema
- name: Services
  tags:
  - Account Services
  - Org Services
  - Project Services
  - Services
- name: Rancher Infrastructures
  tags:
  - Account Rancher Infrastructure
  - Org Rancher Infrastructure
  - Project Rancher Infrastructure
- name: Templates
  tags:
  - Account Template
  - Org Template
  - Project Template
  - Templates
  - Global Templates
- name: GitOps
  tags:
  - Agents
  - Application
  - Applications
  - Certificates
  - Clusters
  - Dashboard Aggregates
  - Dashboards
  - GnuPGP Keys
  - GPG Keys
  - Hosts
  - Project mappings
  - Projects
  - Reconciler
  - Repositories
  - Repository Certificates
  - Repository credentials
  - ValidateHost
- name: GitX
  tags:
  - GitX Webhooks
  - Org Gitx Webhooks
  - Project Gitx Webhooks
- name: CACM
  tags:
  - Anomalies Ignorelist Rule
  - Anomalies
  - BI Dashboards
  - Budgets
  - Budget Groups
  - Cost Categories
  - Cloud Accounts
  - K8S Connectors Metadata
  - Notification Settings v2
  - Overview
  - Data Job Status
  - Recommendation cost settings
  - Unit Metric
  - Anomaly Comments
  - Cloud and AI cost anomaly details
  - Cloud and AI cost anomalies v2
  - Cost Details
  - Currency Preferences
  - External Data Provider
  - AiEngine
  - CACM governance cost settings
  - Governance Enforcement Recommendation APIs
  - Governance Alert
  - Governance Overview
  - Governance Recommendation APIs
  - RuleEnforcement
  - Rule Executions
  - Rule
  - Rule Sets
  - Perspectives Folders
  - Perspective Reports
  - Perspectives
  - Cost Category Jira Project Mapping
  - Recommendations Details
  - Recommendations
  - Recommendation Jira
  - Recommendation Preferences
  - Recommendation Presets
  - Recommendation Servicenow
  - Recommendation Tags
  - Recommendation Ignore List
  - AutoStopping Rules
  - AutoStopping Rules V2
  - AutoStopping Load Balancers
  - AutoStopping Fixed Schedules
  - AutoStopping Alerts
  - Commitment Orchestrator Events APIs
- name: Feature Flags
  tags:
  - API Keys
  - Feature Flags
  - Targets
  - Target Groups
  - Environment Perspectives
  - Anomalies
  - Proxy
  - Tags
- name: SRM
  tags:
  - Monitored Services
  - SLOs dashboard
  - NG SLOs
  - SLOs
  - Downtime
  - Srm Notification
- name: Internal Developer Portal - IDP
  tags:
  - Entities
  - Teams
  - CatalogCustomProperties
  - Scores
  - DataSource
  - KubernetesDataPoints
  - AggregationRules
  - AppConfig
  - PluginInfo
  - LayoutProxy
  - Kinds
  - LayoutsV3
  - LayoutsV4
- name: Environment Management - IDP
  tags:
  - Environment
  - Infrastructure
  - Instance
- name: Custom Dashboards
  tags:
  - aida
  - dashboards
  - downloads
  - embed
  - folders
- name: Policy Management
  tags:
  - dashboard
  - examples
  - policies
  - evaluate
  - evaluations
  - policysets
  - system
- name: Code
  tags:
  - repository
  - status_checks
  - pullreq
  - upload
  - webhook
  - resource
  - rules
  - labels
- name: IaCM
  tags:
  - usage
  - approvals
  - costs
  - executions
  - module-registry
  - workspaces
  - settings
  - tf-standard-backend
  - variables
- name: STO
  tags:
  - Exemptions
  - Issues
  - Scans
  - Products
  - Test Targets
  - Target Variants
- name: SEI
  tags:
  - Collection categories
  - Collections
  - Contributors
  - DORA
- name: Git Sync (deprecated)
  tags:
  - Git Branches
  - Git Full Sync
  - Git Sync Settings
  - Git Sync
  - Git Sync Errors
- name: Error Models
  tags:
  - Error Response
  - Governance Metadata
- name: Supply Chain Security
  tags:
  - integration
  - PipelineInfraConfig
  - SBOM
  - Integration Step Config
  - Delete Step Config
  - Delete Repositories
  - Pipeline Store Config
  - Evidence Vault [Beta]
- name: Release Management
  tags:
  - Release Groups
  - Releases
  - Orchestration Processes
  - Orchestration Activities
  - Orchestration Executions
  - Conflicts
  - Freeze
  - Reports
  - Uploads
- name: Resilience Testing
  tags:
  - Actions
  - Action Templates
  - Chaos Components
  - Chaos Hubs
  - ChaosGuard Conditions
  - ChaosGuard Rules
  - DR Tests
  - Experiments
  - Experiment Templates
  - Faults
  - Fault Templates
  - Chaos Infrastructure
  - Health
  - Network Maps
  - Onboarding
  - Probes
  - Probe Templates
  - Chaos Recommendations
  - Risks