Kenna Security APPLICATIONS API

openapi: 3.2.0
info:
  title: Kenna Platform APPLICATIONS API
  description: OpenAPI specification for Kenna Security
  version: '1.0'
servers:
- url: https://{defaultHost}
  variables:
    defaultHost:
      default: api.kennasecurity.com
tags:
- name: APPLICATIONS
paths:
  /applications:
    get:
      summary: List Applications
      description: 'Returns a list of all of your applications.


        Attribute Value


        Maximum Pages Allowed ∞


        Maximum Page Size 100


        Default Page Size 100


        Total Count Present in meta object No


        See the Pagination Section for more details.'
      operationId: list-applications
      security:
      - X-Risk-Token: []
      tags:
      - APPLICATIONS
      parameters:
      - name: page
        in: query
        description: The specific page being requested from 1 to the total number of pages returned in the `meta` object.
        required: false
        schema:
          type: integer
      - name: per_page
        in: query
        required: false
        description: Number of Applications per page. The default is 100 and the maximum page size is 100.
        schema:
          type: integer
      responses:
        '200':
          description: '200'
          content:
            application/json:
              examples:
                example_0:
                  value:
                    applications:
                    - id: 1
                      name: Demo App
                      repo_url: ''
                      host_name: Demo
                      owner: Demo
                      team_name: Demo
                      business_units: Demo Business Unit
                      notes: ''
                      risk_meter_score: 850
                      vulnerability_count: 916
                      asset_count: 3
                      total_vulnerability_count: 1033
                      external_facing: true
                      priority: 10
                      open_vulnerability_count_by_risk_level:
                        high: 106
                        medium: 162
                        low: 648
                        total: 916
                      historical_risk_meter_scores:
                      - date: '2019-04-03'
                        score: 0
                      - date: '2019-04-04'
                        score: 850
                      identifiers:
                      - Demo App Identifier
                      - Another Demo App ID
                    - id: 2
                      name: Demo App 2
                      repo_url: ''
                      host_name: ''
                      owner: ''
                      team_name: ''
                      business_units: Demo Business Unit
                      notes: ''
                      risk_meter_score: 850
                      vulnerability_count: 916
                      asset_count: 3
                      total_vulnerability_count: 1033
                      external_facing: false
                      priority: 6
                      open_vulnerability_count_by_risk_level:
                        high: 106
                        medium: 162
                        low: 648
                        total: 916
                      historical_risk_meter_scores:
                      - date: '2019-04-06'
                        score: 850
                      - date: '2019-04-09'
                        score: 850
                      identifiers:
                      - Yet another ID
                    meta:
                      page: 1
                      pages: 3
              schema:
                type: object
                properties:
                  applications:
                    type: array
                    items:
                      $ref: '#/components/schemas/application_get_response_schema'
                  meta:
                    $ref: '#/components/schemas/page_metadata'
        '400':
          description: '400'
          content:
            application/json:
              examples:
                example_0: {}
              schema:
                $ref: '#/components/schemas/error_response'
    post:
      summary: Create Application
      description: Creates a single Application and returns the record.
      operationId: create-application
      security:
      - X-Risk-Token: []
      tags:
      - APPLICATIONS
      parameters: []
      responses:
        '200':
          description: '200'
          content:
            application/json:
              examples:
                example_0:
                  value:
                    application:
                      id: 18408
                      name: Demo app
                      repo_url: Demo repo URL
                      host_name: Demo host name
                      owner: Demo owner
                      team_name: Demo team
                      business_units: Demo business units
                      notes: Demo notes
                      risk_meter_score: 0
                      vulnerability_count: 0
                      asset_count: 0
                      total_vulnerability_count: 0
                      external_facing: true
                      priority: 10
                      open_vulnerability_count_by_risk_level:
                        high: 0
                        medium: 0
                        low: 0
                        total: 0
                      historical_risk_meter_scores: []
                      identifiers:
                      - WA-123
              schema:
                $ref: '#/components/schemas/application_post_response_schema'
        '400':
          description: '400'
          content:
            application/json:
              examples:
                example_0: {}
              schema:
                $ref: '#/components/schemas/error_response'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/application_request_body_schema'
  /applications/{id}:
    get:
      summary: Show Application
      description: Returns information about a single application by ID.
      operationId: show-application
      security:
      - X-Risk-Token: []
      tags:
      - APPLICATIONS
      parameters:
      - name: id
        in: path
        description: ''
        required: true
        schema:
          type: integer
      responses:
        '200':
          description: '200'
          content:
            application/json:
              examples:
                example_0:
                  value:
                    application:
                      id: 1
                      name: Demo App
                      repo_url: ''
                      host_name: Demo
                      owner: Demo
                      team_name: Demo
                      business_units: Demo Business Unit
                      notes: ''
                      risk_meter_score: 850
                      vulnerability_count: 916
                      asset_count: 3
                      total_vulnerability_count: 1033
                      external_facing: true
                      priority: 10
                      open_vulnerability_count_by_risk_level:
                        high: 106
                        medium: 162
                        low: 648
                        total: 916
                      historical_risk_meter_scores:
                      - date: '2019-04-03'
                        score: 0
                      - date: '2019-04-04'
                        score: 850
                      identifiers:
                      - Demo App Identifier
                      - Another Demo App ID
              schema:
                $ref: '#/components/schemas/application_get_response_schema'
        '400':
          description: '400'
          content:
            application/json:
              examples:
                example_0: {}
              schema:
                $ref: '#/components/schemas/error_response'
    delete:
      summary: Delete Application
      description: Delete an Application using its ID.
      operationId: delete-application
      security:
      - X-Risk-Token: []
      tags:
      - APPLICATIONS
      parameters:
      - name: id
        in: path
        description: ''
        required: true
        schema:
          type: integer
      responses:
        '200':
          description: '200'
        '400':
          description: '400'
          content:
            application/json:
              examples:
                example_0: {}
              schema:
                $ref: '#/components/schemas/error_response'
    put:
      summary: Update Application
      description: Update a single application's attributes by ID.
      operationId: update-application
      security:
      - X-Risk-Token: []
      tags:
      - APPLICATIONS
      parameters:
      - name: id
        in: path
        description: ''
        required: true
        schema:
          type: integer
      responses:
        '200':
          description: '200'
          content:
            application/json:
              examples:
                example_0:
                  value:
                    application:
                      id: 183
                      name: new application name
                      repo_url: app URL
                      host_name: app host
                      owner: new owner
                      team_name: team name
                      business_units: business units
                      notes: some updated notes
                      risk_meter_score: 0
                      vulnerability_count: 0
                      asset_count: 0
                      total_vulnerability_count: 0
                      external_facing: true
                      priority: 7
                      open_vulnerability_count_by_risk_level:
                        high: 0
                        medium: 0
                        low: 0
                        total: 0
                      historical_risk_meter_scores:
                      - date: '2021-05-04'
                        score: 0
                      - date: '2021-05-05'
                        score: 0
                      - date: '2021-05-06'
                        score: 0
                      identifiers:
                      - iOS Traveler
              schema:
                $ref: '#/components/schemas/application_put_response_schema'
        '400':
          description: '400'
          content:
            application/json:
              examples:
                example_0: {}
              schema:
                $ref: '#/components/schemas/error_response'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/application_update_request_body_schema'
components:
  schemas:
    page_metadata:
      type: object
      properties:
        meta:
          type: object
          required:
          - page
          - pages
          properties:
            page:
              type: integer
              description: The response current page number.
              default: 1
            pages:
              type: integer
              description: The total number of pages.
              default: 1
            total_count:
              type: integer
              description: The total number of items across all pages.
              default: 1
    error_response:
      type: object
      properties:
        error:
          type: string
          description: The HTTP error message.
        message:
          type: string
          description: The specific error message.
        success:
          type: string
          description: Indicates success, usually 'false'.
    application_update_request_body_schema:
      type: object
      properties:
        application:
          type: object
          properties:
            business_units:
              type: string
              description: Business units for the application
            external_facing:
              type: boolean
              description: Set this to true if your application is external facing.
              default: 'true'
            identifiers:
              type: array
              description: Array of identifiers for the application
              default: []
              items:
                type: string
            host_name:
              type: string
              description: Name of the host where the application is deployed
            name:
              type: string
              description: Name of the application
            notes:
              type: string
              description: Any notes regarding the application
            owner:
              type: string
              description: Name of the application owner
            priority:
              type: integer
              description: The priority of your application, on a scale of 1 (low priority) to 10 (high priority).
              default: '10'
              format: int32
            repo_url:
              type: string
              description: URL to the code repository for the application
            team_name:
              type: string
              description: Name of the team responsible for the application
    application_request_body_schema:
      type: object
      properties:
        application:
          type: object
          required:
          - identifiers
          - name
          properties:
            business_units:
              type: string
              description: Business units for the application
            external_facing:
              type: boolean
              description: Set this to true if your application is external facing.
              default: 'true'
            identifiers:
              type: array
              description: Array of identifiers for the application
              default: []
              items:
                type: string
            host_name:
              type: string
              description: Name of the host where the application is deployed
            name:
              type: string
              description: Name of the application
            notes:
              type: string
              description: Any notes regarding the application
            owner:
              type: string
              description: Name of the application owner
            priority:
              type: integer
              description: The priority of your application, on a scale of 1 (low priority) to 10 (high priority).
              default: '10'
              format: int32
            repo_url:
              type: string
              description: URL to the code repository for the application
            team_name:
              type: string
              description: Name of the team responsible for the application
    application_get_response_schema:
      type: object
      properties:
        application:
          type: object
          properties:
            id:
              type: integer
              example: 1
              default: 0
            name:
              type: string
              example: Great App
            repo_url:
              type: string
              example: https://my-great-app.com
            host_name:
              type: string
              example: greatapp.apps.com
            owner:
              type: string
              example: Jane Doe
            team_name:
              type: string
              example: Marketing team
            business_units:
              type: string
              example: Marketing
            notes:
              type: string
              example: Used by Marketing team only
            risk_meter_score:
              type: integer
              example: 850
              default: 0
            vulnerability_count:
              type: integer
              example: 916
              default: 0
            asset_count:
              type: integer
              example: 3
              default: 0
            total_vulnerability_count:
              type: integer
              example: 1033
              default: 0
            external_facing:
              type: boolean
              example: true
              default: true
            priority:
              type: integer
              example: 10
              default: 0
            open_vulnerability_count_by_risk_level:
              type: object
              properties:
                high:
                  type: integer
                  example: 106
                  default: 0
                medium:
                  type: integer
                  example: 162
                  default: 0
                low:
                  type: integer
                  example: 648
                  default: 0
                total:
                  type: integer
                  example: 916
                  default: 0
            historical_risk_meter_scores:
              type: array
              items:
                type: object
                properties:
                  date:
                    type: string
                    example: '2019-04-03'
                  score:
                    type: integer
                    example: 0
                    default: 0
            identifiers:
              type: array
              items:
                type: string
                example: Demo App Identifier
    application_put_response_schema:
      type: object
      properties:
        application:
          type: object
          properties:
            id:
              type: integer
              example: 183
              default: 0
            name:
              type: string
              example: my new great app
            repo_url:
              type: string
              example: https://my-great-app.com
            host_name:
              type: string
              example: greatapp.apps.com
            owner:
              type: string
              example: Jane Doe
            team_name:
              type: string
              example: Marketing Team
            business_units:
              type: string
              example: Marketing
            notes:
              type: string
              example: Used by the Marketing Department
            risk_meter_score:
              type: integer
              example: 0
              default: 0
            vulnerability_count:
              type: integer
              example: 0
              default: 0
            asset_count:
              type: integer
              example: 0
              default: 0
            total_vulnerability_count:
              type: integer
              example: 0
              default: 0
            external_facing:
              type: boolean
              example: true
              default: true
            priority:
              type: integer
              example: 7
              default: 0
            open_vulnerability_count_by_risk_level:
              type: object
              properties:
                high:
                  type: integer
                  example: 0
                  default: 0
                medium:
                  type: integer
                  example: 0
                  default: 0
                low:
                  type: integer
                  example: 0
                  default: 0
                total:
                  type: integer
                  example: 0
                  default: 0
            historical_risk_meter_scores:
              type: array
              items:
                type: object
                properties:
                  date:
                    type: string
                    example: '2021-05-04'
                  score:
                    type: integer
                    example: 0
                    default: 0
            identifiers:
              type: array
              items:
                type: string
                example: iOS Traveler
    application_post_response_schema:
      type: object
      properties:
        application:
          type: object
          properties:
            id:
              type: integer
              example: 18408
              default: 0
            name:
              type: string
              example: Great App
            repo_url:
              type: string
              example: https://my-great-app.com
            host_name:
              type: string
              example: greatapp.apps.com
            owner:
              type: string
              example: Jane Doe
            team_name:
              type: string
              example: Marketing team
            business_units:
              type: string
              example: Marketing
            notes:
              type: string
              example: Used by Marketing team only
            risk_meter_score:
              type: integer
              example: 0
              default: 0
            vulnerability_count:
              type: integer
              example: 0
              default: 0
            asset_count:
              type: integer
              example: 0
              default: 0
            total_vulnerability_count:
              type: integer
              example: 0
              default: 0
            external_facing:
              type: boolean
              example: true
              default: true
            priority:
              type: integer
              example: 10
              default: 0
            open_vulnerability_count_by_risk_level:
              type: object
              properties:
                high:
                  type: integer
                  example: 0
                  default: 0
                medium:
                  type: integer
                  example: 0
                  default: 0
                low:
                  type: integer
                  example: 0
                  default: 0
                total:
                  type: integer
                  example: 0
                  default: 0
            historical_risk_meter_scores:
              type: array
              items:
                type: integer
            identifiers:
              type: array
              items:
                type: string
                example: WA-123
  securitySchemes:
    X-Risk-Token:
      type: apiKey
      name: X-Risk-Token
      in: header
x-provenance:
  method: searched
  source: https://apidocs.kennasecurity.com/reference
  harvested: '2026-10-14'
  tool: harvest-readme-openapi.py
  note: Assembled verbatim from the OpenAPI definition ReadMe embeds in each operation page of the provider's developer portal; paths and components merged by API title, nothing authored.
  assembled_from:
  - https://apidocs.kennasecurity.com/reference/add-applications-to-role.md
  - https://apidocs.kennasecurity.com/reference/add-asset-groups-to-role.md
  - https://apidocs.kennasecurity.com/reference/application-findings-historical-mean-time-to-remediate-by-risk-level.md
  - https://apidocs.kennasecurity.com/reference/application-historical-mean-time-to-remediate-by-risk-level.md
  - https://apidocs.kennasecurity.com/reference/application-historical-vulnerability-count-by-risk-level.md
  - https://apidocs.kennasecurity.com/reference/asset-groups-findings-historical-mean-time-to-remediate-by-risk-level.md
  - https://apidocs.kennasecurity.com/reference/audit-log-search.md
  - https://apidocs.kennasecurity.com/reference/average-days-open-by-risk-level-over-time.md
  - https://apidocs.kennasecurity.com/reference/bulk-delete-findings.md
  - https://apidocs.kennasecurity.com/reference/bulk-delete-vulnerabilities.md
  - https://apidocs.kennasecurity.com/reference/bulk-update-assets.md
  - https://apidocs.kennasecurity.com/reference/bulk-update-vulnerability.md
  - https://apidocs.kennasecurity.com/reference/calculate-asset-group-metric.md
  - https://apidocs.kennasecurity.com/reference/check-data-export-status.md
  - https://apidocs.kennasecurity.com/reference/check-remediation-score.md
  - https://apidocs.kennasecurity.com/reference/check-sla-adherence-metrics.md
  - https://apidocs.kennasecurity.com/reference/check-vulnerability-densities-metrics.md
  - https://apidocs.kennasecurity.com/reference/create-application.md
  - https://apidocs.kennasecurity.com/reference/create-asset-group-and-risk-meter.md
  - https://apidocs.kennasecurity.com/reference/create-asset.md
  - https://apidocs.kennasecurity.com/reference/create-child-asset-group-and-risk-meter.md
  - https://apidocs.kennasecurity.com/reference/create-dashboard-group.md
  - https://apidocs.kennasecurity.com/reference/create-finding.md
  - https://apidocs.kennasecurity.com/reference/create-role.md
  - https://apidocs.kennasecurity.com/reference/create-stack.md
  - https://apidocs.kennasecurity.com/reference/create-user.md
  - https://apidocs.kennasecurity.com/reference/create-vulnerability.md
  - https://apidocs.kennasecurity.com/reference/delete-application.md
  - https://apidocs.kennasecurity.com/reference/delete-asset-group.md
  - https://apidocs.kennasecurity.com/reference/delete-dashboard-group.md
  - https://apidocs.kennasecurity.com/reference/delete-role.md
  - https://apidocs.kennasecurity.com/reference/delete-stack.md
  - https://apidocs.kennasecurity.com/reference/delete-user.md
  - https://apidocs.kennasecurity.com/reference/delete-vulnerability.md
  - https://apidocs.kennasecurity.com/reference/download-zipped-asset-data.md
  - https://apidocs.kennasecurity.com/reference/download-zipped-vuln-data.md
  - https://apidocs.kennasecurity.com/reference/entitlements-overage.md
  - https://apidocs.kennasecurity.com/reference/false-positive-by-risk-level-over-time.md
  - https://apidocs.kennasecurity.com/reference/get-refresh-reporting-status.md
  - https://apidocs.kennasecurity.com/reference/historical-mean-time-to-remediate-by-risk-level.md
  - https://apidocs.kennasecurity.com/reference/historical-risk-meter-scores.md
  - https://apidocs.kennasecurity.com/reference/historical-vulnerability-risk-category-counts.md
  - https://apidocs.kennasecurity.com/reference/kill-running-data-export.md
  - https://apidocs.kennasecurity.com/reference/list-applications.md
  - https://apidocs.kennasecurity.com/reference/list-asset-groups.md
  - https://apidocs.kennasecurity.com/reference/list-assets.md
  - https://apidocs.kennasecurity.com/reference/list-connector-runs.md
  - https://apidocs.kennasecurity.com/reference/list-connectors.md
  - https://apidocs.kennasecurity.com/reference/list-cve-identifiers.md
  - https://apidocs.kennasecurity.com/reference/list-dashboard-groups.md
  - https://apidocs.kennasecurity.com/reference/list-fix-alternatives.md
  - https://apidocs.kennasecurity.com/reference/list-fixes.md
  - https://apidocs.kennasecurity.com/reference/list-roles.md
  - https://apidocs.kennasecurity.com/reference/list-stacks.md
  - https://apidocs.kennasecurity.com/reference/list-tags.md
  - https://apidocs.kennasecurity.com/reference/list-users.md
  - https://apidocs.kennasecurity.com/reference/list-vulnerabilities.md
  - https://apidocs.kennasecurity.com/reference/list-vulnerability-definitions.md
  - https://apidocs.kennasecurity.com/reference/past-due-vulnerabilities-by-risk-level-over-time.md
  - https://apidocs.kennasecurity.com/reference/refresh-reporting-data.md
  - https://apidocs.kennasecurity.com/reference/request-data-export.md
  - https://apidocs.kennasecurity.com/reference/retrieve-data-export.md
  - https://apidocs.kennasecurity.com/reference/risk-accepted-by-risk-level-over-time.md
  - https://apidocs.kennasecurity.com/reference/run-connector.md
  - https://apidocs.kennasecurity.com/reference/search-assets.md
  - https://apidocs.kennasecurity.com/reference/search-findings.md
  - https://apidocs.kennasecurity.com/reference/search-fixes.md
  - https://apidocs.kennasecurity.com/reference/search-for-vulnerability-definitions.md
  - https://apidocs.kennasecurity.com/reference/search-users.md
  - https://apidocs.kennasecurity.com/reference/search-vulnerabilities.md
  - https://apidocs.kennasecurity.com/reference/service-now-list-fixes.md
  - https://apidocs.kennasecurity.com/reference/service-now-search-vulnerabilities.md
  - https://apidocs.kennasecurity.com/reference/show-all-fixes.md
  - https://apidocs.kennasecurity.com/reference/show-application.md
  - https://apidocs.kennasecurity.com/reference/show-asset-group.md
  - https://apidocs.kennasecurity.com/reference/show-asset-vulnerabilities.md
  - https://apidocs.kennasecurity.com/reference/show-asset.md
  - https://apidocs.kennasecurity.com/reference/show-chatter.md
  - https://apidocs.kennasecurity.com/reference/show-connector-run.md
  - https://apidocs.kennasecurity.com/reference/show-cve-history.md
  - https://apidocs.kennasecurity.com/reference/show-dashboard-group.md
  - https://apidocs.kennasecurity.com/reference/show-finding.md
  - https://apidocs.kennasecurity.com/reference/show-fix.md
  - https://apidocs.kennasecurity.com/reference/show-malware-hashes.md
  - https://apidocs.kennasecurity.com/reference/show-role.md
  - https://apidocs.kennasecurity.com/reference/show-scanner-vulnerability-details.md
  - https://apidocs.kennasecurity.com/reference/show-stack.md
  - https://apidocs.kennasecurity.com/reference/show-top-fix-groups.md
  - https://apidocs.kennasecurity.com/reference/show-user.md
  - https://apidocs.kennasecurity.com/reference/show-vulnerability-definition.md
  - https://apidocs.kennasecurity.com/reference/show-vulnerability.md
  - https://apidocs.kennasecurity.com/reference/stack-applications-statistics.md
  - https://apidocs.kennasecurity.com/reference/stack-asset-groups-statistics.md
  - https://apidocs.kennasecurity.com/reference/tag-an-asset.md
  - https://apidocs.kennasecurity.com/reference/total-past-due-vulnerabilities-by-risk-level.md
  - https://apidocs.kennasecurity.com/reference/trends.md
  - https://apidocs.kennasecurity.com/reference/untag-an-asset.md
  - https://apidocs.kennasecurity.com/reference/update-application.md
  - https://apidocs.kennasecurity.com/reference/update-asset-group.md
  - https://apidocs.kennasecurity.com/reference/update-asset.md
  - https://apidocs.kennasecurity.com/reference/update-connector.md
  - https://apidocs.kennasecurity.com/reference/update-dashboard-group.md
  - https://apidocs.kennasecurity.com/reference/update-findings.md
  - https://apidocs.kennasecurity.com/reference/update-permissions-in-bulk.md
  - https://apidocs.kennasecurity.com/reference/update-role-custom-permissions.md
  - https://apidocs.kennasecurity.com/reference/update-role.md
  - https://apidocs.kennasecurity.com/reference/update-stack.md
  - https://apidocs.kennasecurity.com/reference/update-user.md
  - https://apidocs.kennasecurity.com/reference/update-vulnerability.md
  - https://apidocs.kennasecurity.com/reference/upload-data-file.md
  - https://apidocs.kennasecurity.com/reference/validate-asset-search-query.md
  - https://apidocs.kennasecurity.com/reference/validate-vulnerability-search-query.md
  - https://apidocs.kennasecurity.com/reference/vi-data-snapshot.md
  - https://apidocs.kennasecurity.com/reference/vulnerabilities-by-due-date.md
  - https://apidocs.kennasecurity.com/reference/vulnerability-definitions-with-significant-score-change.md
  merge:
    pages: 115
    deduped: 272
    conflicts_kept_first: 0