Mend

Mend Findings - Project API

The Findings - Project API from Mend — 26 operation(s) for findings - project.

GitHub OpenAPI
Business capability
Vulnerability Management BC-620.40

Operations 27

GET /api/v3.0/projects/{projectUuid}/dependencies/findings/security Get project security findings (Dependencies - SCA) #
GET /api/v3.0/projects/{projectUuid}/dependencies/findings/security/groupBy/library Get libraries security findings #
GET /api/v3.0/projects/{projectUuid}/dependencies/findings/security/groupBy/rootLibrary Get root libraries security findings (Dependencies - SCA) #
PUT /api/v3.0/projects/{projectUuid}/dependencies/findings/security/rootLibrary/{rootLibraryUuid} Update root library security finding (Dependencies - SCA) #
GET /api/v3.0/projects/{projectUuid}/dependencies/libraries Get project libraries (Dependencies - SCA) #
GET /api/v3.0/projects/{projectUuid}/dependencies/libraries/inHouse Get in-house libraries (Dependencies - SCA) #
GET /api/v3.0/projects/{projectUuid}/dependencies/libraries/licenses Get project due diligence information (Dependencies - SCA) #
GET /api/v3.0/projects/{projectUuid}/code/findings Get a list of project findings (Code - SAST) #
PATCH /api/v3.0/projects/{projectUuid}/code/findings Bulk update of project findings state (review and/or suppression) or severity #
PATCH /api/v3.0/projects/{projectUuid}/code/findings/{findingSnapshotId} Update a project finding state (review and/or suppression) or severity (Code… #
GET /api/v3.0/projects/{projectUuid}/code/findings/{findingUuid} Get a project finding (Code - SAST) #
POST /api/v3.0/projects/{projectuuid}/images/findings Update multiple findings status #
PUT /api/v3.0/projects/{projectuuid}/images/findings/packages/{packageuuid} Update package status #
GET /api/v3.0/projects/{projectuuid}/images/findings/secrets List latest image scan secrets findings #
GET /api/v3.0/projects/{projectuuid}/images/findings/security List latest image scan security findings #
PUT /api/v3.0/projects/{projectuuid}/images/findings/security/{findingid} Update finding status #
GET /api/v3.0/projects/{projectuuid}/images/packages List latest image scan packages #
GET /api/v3.0/projects/{projectUuid}/ai/findings/technologies Get project AI technologies #
GET /api/v3.0/projects/{projectUuid}/ai/findings/models Get project AI models #
GET /api/v3.0/projects/{projectUuid}/ai/vulnerabilities Get project AI vulnerabilities #
GET /api/v3.0/projects/{projectUuid}/ai/vulnerabilities/{vulnerabilityId} Get AI vulnerability details #
GET /api/v3.0/applications/{applicationUuid}/ai/findings/models Get application AI models #
GET /api/v3.0/applications/{applicationUuid}/ai/vulnerabilities Get application AI vulnerabilities #
GET /api/v3.0/projects/{projectUuid}/ai/findings/implementation Get project implementation findings #
GET /api/v3.0/projects/{projectUuid}/ai/findings/implementation/snippet/{snippetUuid} Get implementation finding snippet #
GET /api/v3.0/applications/{applicationUuid}/ai/findings/implementation Get application implementation findings #
GET /api/v3.0/applications/{applicationUuid}/ai/vulnerabilities/{vulnerabilityId} Get application AI vulnerability details #

Documentation

📖
APIReference
https://api-docs.mend.io/platform/3.0
📖
APIReference
https://api-docs.mend.io/sca/2.0

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/mend/refs/heads/main/openapi/mend-findings-project-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mend/refs/heads/main/json-schema/mend-model-security-finding-external-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mend/refs/heads/main/json-schema/mend-github-com-mend-cloud-native-modules-common-model-finding-status-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mend/refs/heads/main/json-schema/mend-github-com-mend-cloud-native-modules-scanner-model-secret-finding-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mend/refs/heads/main/json-schema/mend-dto-patch-finding-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/mend:mend-findings-project-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

mend-findings-project-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Mend Findings - Project API
  description: Mend's enhanced API enables automation of workflows in a REST compliant format.
  version: '3.0'
servers:
- url: https://baseUrl
  description: Generated server url
security:
- bearer-key: []
tags:


# --- truncated at 32 KB (125 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mend/refs/heads/main/openapi/mend-findings-project-api-openapi.yml