Mend

Mend.io (formerly WhiteSource) is a unified application security and AI security platform that helps engineering and security teams find and automatically remediate vulnerabilities across open-source dependencies, proprietary code, containers, and AI models/agents. Its products span Software Composition Analysis (SCA), Static Application Security Testing (SAST), container image scanning, SBOM generation, automated dependency updates (Renovate), and AI-native security for LLM-powered applications. Mend exposes a REST-compliant AppSec Platform API (v3.0) and an SCA API (v2.0) for automating scans, projects, applications, findings, reports, and administration, secured with a short-lived per-organization JWT obtained from a user key.

Mend publishes 142 API contracts indexed on the APIs.io network, including Access Management API, Access Management - Organizations API, Administration - Groups API, and 139 more. Tagged areas include Application Security, Software Composition Analysis, SAST, Container Security, and AI Security.

The Mend catalog on APIs.io includes 1 JSON-LD context and 1 Spectral governance ruleset.

Mend’s developer surface includes pricing, authentication, changelog, CLI, documentation, API reference, getting-started guide, and 33 more developer resources.

🌐 Visit website 📡 Profile data on GitHub

64.9/100 strong ▬ flat Agent 27/100 agent aware Front door AI 6/6 dominant Heartbeat 100/100 alive saas Full breakdown ↓
scored 2026-11-06 · rubric v0.27.0 · Show this score on your site →

AccessPaid

3 published contracts 1 MCP Servers 3 Agent Skills

Application Security Software Composition Analysis SAST Container Security AI Security Dependency Management Vulnerability Management DevSecOps SBOM Open Source Security Company

What this lets a business do 3

Business capabilities this provider's published APIs can perform, derived from its own contracts. Browse all capabilities →

Cybersecurity Management

BC-620

ASPMAdministration - GroupsAdministration - UsersAlerts - OrganizationAlerts - ProductAlerts - Project

GET /api/v2.0/products/{productToken}/alerts/security PUT /api/v2.0/projects/{projectToken}/alerts/securityByProjectLibraryCve GET /api/v2.0/sast/api/v2/scans/{scanIdentifier}/findings/{findingIdentifier}/remediations GET /api/v3.0/orgs/{orgUuid}/remediations/time-to-remediate

SaaS Tenant Management

BC-4230

SAML Integration - AccountSAML Integration - Organization

GET /api/v3.0/accounts/{scopeUuid}/saml/settings GET /api/v3.0/orgs/{scopeUuid}/saml/settings

Software Product Engineering Management

BC-4200

Library - Organization

Kin Score

Kin Score How this is scored →
scored 2026-11-06 · rubric v0.27.0

Composite quality — 64.9/100 · strong

Contract Quality 11.5 / 19

Developer Ergonomics 9.9 / 15

Access Clarity 12.6 / 15

Operational Transparency 3.6 / 10

Contract Governance 2.0 / 9

Discoverability 6.0 / 8

Regulatory Posture 3.8 / 15

Create-or-Update Ergonomics 3.3 / 10

Agent readiness — 27/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 6 / 6

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 8 / 8

Request/Response Examples 7 / 7

Rate-Limit Signaling 0 / 7

Typed Event Surface 0 / 6

Agent Skills 5 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Delegated User Identity 0 / 6

Protected Resource Metadata 0 / 5

Registration Without a Human 0 / 6

Agentic Commerce Well-Known Document 0 / 5

Pagination 0 / 5

Distinct Operations 0 / 3

MCP Tool Quality 6 / 6

Regulatory Posture applies to this provider. Its tags matched the Horizontal (data, software, accessibility, platform) regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.

Create-or-Update Ergonomics applies to this provider. This API accepts writes, so it carries 10 points of the composite. It is scored from the published contracts themselves: whether a caller can create-or-update in one call, whether the write accepts a key the caller already holds, and whether the response says which branch ran. Without that, every write needs a search-and-branch in front of it, and the first time that check is skipped a duplicate record is created. Scored against the observed mean rather than raw — a provider at the catalog average is unchanged by this facet, not penalised by it.

The six quality facets above are damped to 75 points between them, because the conditional facet above carries the other 25. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 75% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.

Show this score on your site.

It updates itself when the score changes. Paste this where you link to your API docs:

<a href="https://apis.io/providers/mend/"><img src="https://apis.io/badge/mend/card.svg" alt="Mend on APIs.io — Kin Score by API Evangelist"></a>

Other styles, a README pill and a shields.io endpoint are on the badge page.

Raise your score.

Agent readiness — checks not met, largest first (exact, from this profile):

MCP Server +12 pts — deployment.mode + probe verdict on the mcp/ manifest, not the pointer; an unprobed slug falls back to authorship
Idempotency +9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
A2A Agent Card +8 pts — a2a/-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0
Rate-Limit Signaling +7 pts — OpenAPI responses document X-RateLimit-* / RateLimit headers (verified), else a rate_limits artifact or RateLimits link (documented)
Registration Without a Human +6 pts — a `registration_endpoint` in the served RFC 8414 / OIDC discovery document
Delegated User Identity +6 pts — a served discovery document listing authorization_code in grant_types_supported (served), else an oauth2 authorizationCode flow or openIdConnect declared in an OpenAPI (documented)

8 more unmet checks in the Agent Readiness table above.

Kin Score — facets with the most composite points still available (weight × headroom):

Contract Quality scores 61.2 — up to +9.7 composite points
Contract Governance scores 22.0 — up to +9.4 composite points
Operational Transparency scores 36.8 — up to +8.2 composite points

Each check links to what satisfies it. Publish the artifact, or tell us where it already lives, and the score moves on the next scoring run.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from the provider profile at artifacts.apis.io/mend/apis.yml: open an issue on github.com/api-evangelist/mend to ask a question or point us at an artifact you publish. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

Markets this provider is in provisional

The Kin Score Market layer reads a provider inside its market: its position, and how deep its integrations go. Depth is only comparable within a position. Provisional and unweighted: not part of the Kin Score or agent readiness.

Market	Position	Depth	Registered MCP server	Declares compatibility
Software Supply Chain (SBOM, Signing, Open Source Security)	builds-on	48.9	-	-
IDE Extension Marketplaces (JetBrains, VS Code, Open VSX, Docker Verified Publishers, PyPI orgs)	builds-on	48.9	-	-
Backstage Plugin Directory	builds-on	48.9	-	-
Artifact Hub Cloud-Native Packages	builds-on	48.9	-	-
ServiceNow Store (partner apps + ServiceNow Certified App)	builds-on	48.9	-	-

Registered MCP server and declares compatibility are report only — not weighted. Undeclared means we found nothing we can read, so there is no number: we never infer integrations.

Standards implemented 2

Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.

DevSecOps

tagged — the provider's own APIs.json carries the standard as a tag; implementation not verified

OpenAPI

measured — observed by APIs.io (published)

APIs 142

Individual APIs this provider publishes, each with its own machine-readable definition.

Mend Access Management API

The Access Management API from Mend — 5 operation(s) for access management.

Mend Access Management - Organizations API

The Access Management - Organizations API from Mend — 2 operation(s) for access management - organizations.

Mend Administration - Groups API

The Administration - Groups API from Mend — 6 operation(s) for administration - groups.

Mend Administration - Labels API

The Administration - Labels API from Mend — 2 operation(s) for administration - labels.

Mend Administration - Users API

The Administration - Users API from Mend — 5 operation(s) for administration - users.

Mend AI API

The AI API from Mend — 1 operation(s) for ai.

Mend Alerts - Product API

The Alerts - Product API from Mend — 3 operation(s) for alerts - product.

Mend Alerts - Project API

The Alerts - Project API from Mend — 6 operation(s) for alerts - project.

Mend Applications API

The Applications API from Mend — 8 operation(s) for applications.

Mend Asynchronous Process Control API

The Asynchronous Process Control API from Mend — 1 operation(s) for asynchronous process control.

Mend CustomAttribute - Organization API

The CustomAttribute - Organization API from Mend — 2 operation(s) for customattribute - organization.

Mend CustomAttribute - Product API

The CustomAttribute - Product API from Mend — 1 operation(s) for customattribute - product.

Mend CustomAttribute - Project API

The CustomAttribute - Project API from Mend — 1 operation(s) for customattribute - project.

Mend Dependencies Source Files API

The Dependencies Source Files API from Mend — 8 operation(s) for dependencies source files.

Mend Domain Controller API

The domain-controller API from Mend — 1 operation(s) for domain-controller.

Mend Entities - Organization API

The Entities - Organization API from Mend — 7 operation(s) for entities - organization.

Mend Entities - Product API

The Entities - Product API from Mend — 2 operation(s) for entities - product.

Mend Entities - Project API

The Entities - Project API from Mend — 3 operation(s) for entities - project.

Mend Findings - Project API

The Findings - Project API from Mend — 26 operation(s) for findings - project.

Mend Findings - Scan API

The Findings - Scan API from Mend — 5 operation(s) for findings - scan.

Mend General Info - Licenses API

The General Info - Licenses API from Mend — 2 operation(s) for general info - licenses.

Mend General Info - Permissions API

The General Info - Permissions API from Mend — 1 operation(s) for general info - permissions.

Mend General Info - Vulnerabilities API

The General Info - Vulnerabilities API from Mend — 2 operation(s) for general info - vulnerabilities.

Mend Integrations API

The Integrations API from Mend — 1 operation(s) for integrations.

Mend Library - Organization API

The Library - Organization API from Mend — 10 operation(s) for library - organization.

Mend Library - Product API

The Library - Product API from Mend — 6 operation(s) for library - product.

Mend Library - Project API

The Library - Project API from Mend — 5 operation(s) for library - project.

Mend Library - Source Files API

The Library - Source Files API from Mend — 2 operation(s) for library - source files.

Mend Policies - Organization API

The Policies - Organization API from Mend — 4 operation(s) for policies - organization.

Mend Policies - Product API

The Policies - Product API from Mend — 4 operation(s) for policies - product.

Mend Policies - Project API

The Policies - Project API from Mend — 4 operation(s) for policies - project.

Mend Product Attribution Report Controller API

The product-attribution-report-controller API from Mend — 1 operation(s) for product-attribution-report-controller.

Mend Project Attribution Report Controller API

The project-attribution-report-controller API from Mend — 1 operation(s) for project-attribution-report-controller.

Mend Projects API

The Projects API from Mend — 11 operation(s) for projects.

Mend Red Team API

The Red Team API from Mend — 1 operation(s) for red team.

Mend Reports API

The Reports API from Mend — 43 operation(s) for reports.

Mend Scans API

The Scans API from Mend — 6 operation(s) for scans.

Mend Settings - In-House API

The Settings - In-House API from Mend — 4 operation(s) for settings - in-house.

Mend Settings - Whitelist API

The Settings - Whitelist API from Mend — 4 operation(s) for settings - whitelist.

Mend Summary - Organization API

The Summary - Organization API from Mend — 12 operation(s) for summary - organization.

Mend Update Request API

The Update Request API from Mend — 1 operation(s) for update request.

Mend User Management - Groups API

The User Management - Groups API from Mend — 5 operation(s) for user management - groups.

Mend User Management - Roles And Permissions API

The User Management - Roles And Permissions API from Mend — 3 operation(s) for user management - roles and permissions.

Mend User Management - Users API

The User Management - Users API from Mend — 9 operation(s) for user management - users.

Mend User Profile API

The User Profile API from Mend — 2 operation(s) for user profile.

Mend Vulnerable Libraries API

The Vulnerable Libraries API from Mend — 1 operation(s) for vulnerable libraries.

Mend Zero-Day Events API

The Zero-Day Events API from Mend — 2 operation(s) for zero-day events.

Mend Administration - Activity Log API

The Administration - Activity Log API from Mend — 2 operation(s) for administration - activity log.

Mend Adoption Wizard API

The Adoption Wizard API from Mend — 7 operation(s) for adoption wizard.

Mend Alerts - Organization API

The Alerts - Organization API from Mend — 5 operation(s) for alerts - organization.

Mend Allowlist IP API

The Allowlist IP API from Mend — 8 operation(s) for allowlist ip.

Mend Application Approval Requests Controller API

The application-approval-requests-controller API from Mend — 1 operation(s) for application-approval-requests-controller.

Mend Application Violations Controller API

The application-violations-controller API from Mend — 2 operation(s) for application-violations-controller.

Mend ASPM API

The ASPM API from Mend — 30 operation(s) for aspm.

Mend Audit API

The Audit API from Mend — 1 operation(s) for audit.

Mend Automation Engine Controller API

The automation-engine-controller API from Mend — 8 operation(s) for automation-engine-controller.

Mend Backfill - Projects API

The Backfill - Projects API from Mend — 1 operation(s) for backfill - projects.

Mend CVSS Settings API

The CVSS Settings API from Mend — 2 operation(s) for cvss settings.

Mend Dashboard API

The Dashboard API from Mend — 3 operation(s) for dashboard.

Mend Domain Approval Requests Controller API

The domain-approval-requests-controller API from Mend — 1 operation(s) for domain-approval-requests-controller.

Mend Domain Reports API

The DomainReports API from Mend — 8 operation(s) for domainreports.

Mend Downloads - CLI API

The Downloads - CLI API from Mend — 2 operation(s) for downloads - cli.

Mend Entities - Application Configurations API

The Entities - Application Configurations API from Mend — 1 operation(s) for entities - application configurations.

Mend Entities - Code Configurations API

The Entities - Code Configurations API from Mend — 10 operation(s) for entities - code configurations.

Mend Entities - General Tech Tags API

The Entities - General Tech Tags API from Mend — 2 operation(s) for entities - general tech tags.

Mend Entities - Labels API

The Entities - Labels API from Mend — 2 operation(s) for entities - labels.

Mend Entities - Organization Configurations API

The Entities - Organization Configurations API from Mend — 6 operation(s) for entities - organization configurations.

Mend Entities - Product Configurations API

The Entities - Product Configurations API from Mend — 3 operation(s) for entities - product configurations.

Mend Entities - Product Labels API

The Entities - Product Labels API from Mend — 4 operation(s) for entities - product labels.

Mend Entities - Product Tags API

The Entities - Product Tags API from Mend — 1 operation(s) for entities - product tags.

Mend Entities - Product Tech Tags API

The Entities - Product Tech Tags API from Mend — 2 operation(s) for entities - product tech tags.

Mend Entities - Project Configurations API

The Entities - Project Configurations API from Mend — 4 operation(s) for entities - project configurations.

Mend Entities - Project Labels API

The Entities - Project Labels API from Mend — 3 operation(s) for entities - project labels.

Mend Entities - Project Tags API

The Entities - Project Tags API from Mend — 1 operation(s) for entities - project tags.

Mend Entities - Project Tech Tags API

The Entities - Project Tech Tags API from Mend — 2 operation(s) for entities - project tech tags.

Mend Findings API

The Findings API from Mend — 5 operation(s) for findings.

Mend Findings - Comments API

The Findings - Comments API from Mend — 2 operation(s) for findings - comments.

Mend General Info - Library Types API

The General Info - Library Types API from Mend — 1 operation(s) for general info - library types.

Mend General Info - Versions API

The General Info - Versions API from Mend — 1 operation(s) for general info - versions.

Mend Integrations - Domain API

The Integrations - Domain API from Mend — 1 operation(s) for integrations - domain.

Mend Internal - Notifications API

The Internal - Notifications API from Mend — 1 operation(s) for internal - notifications.

Mend Internal Organizations API

The Internal Organizations API from Mend — 11 operation(s) for internal organizations.

Mend Internal Projects API

The Internal Projects API from Mend — 6 operation(s) for internal projects.

Mend Internal Service Controller API

The internal-service-controller API from Mend — 1 operation(s) for internal-service-controller.

Mend Issues - Project API

The Issues - Project API from Mend — 5 operation(s) for issues - project.

Mend Label Management API

The Label Management API from Mend — 2 operation(s) for label management.

Mend New SCA Project Reports API

The NewSCAProjectReports API from Mend — 12 operation(s) for newscaprojectreports.

Mend NLP API

The NLP API from Mend — 1 operation(s) for nlp.

Mend Organizations API

The Organizations API from Mend — 7 operation(s) for organizations.

Mend Platform Assistant API

The Platform Assistant API from Mend — 2 operation(s) for platform assistant.

Mend Product Reports API

The ProductReports API from Mend — 3 operation(s) for productreports.

Mend Products Reports API

The ProductsReports API from Mend — 5 operation(s) for productsreports.

Mend Project Approval Requests Controller API

The project-approval-requests-controller API from Mend — 1 operation(s) for project-approval-requests-controller.

Mend Project Classification Evidence API

The Project Classification Evidence API from Mend — 1 operation(s) for project classification evidence.

Mend Project Hierarchy Controller API

The project-hierarchy-controller API from Mend — 4 operation(s) for project-hierarchy-controller.

Mend Project Violations Controller API

The project-violations-controller API from Mend — 2 operation(s) for project-violations-controller.

Mend Project Reports API

The ProjectReports API from Mend — 8 operation(s) for projectreports.

Mend Redis Test Controller API

The redis-test-controller API from Mend — 1 operation(s) for redis-test-controller.

Mend Remediations API

The Remediations API from Mend — 5 operation(s) for remediations.

Mend Risk Report API

The Risk Report API from Mend — 2 operation(s) for risk report.

Mend SAML Integration - Account API

The SAML Integration - Account API from Mend — 6 operation(s) for saml integration - account.

Mend SAML Integration - Internal API

The SAML Integration - Internal API from Mend — 2 operation(s) for saml integration - internal.

Mend SAML Integration - Organization API

The SAML Integration - Organization API from Mend — 6 operation(s) for saml integration - organization.

Mend SAST Agents API

The SAST Agents API API from Mend — 12 operation(s) for sast agents api.

Mend SAST Agents V1 API

The SAST Agents V1 API API from Mend — 4 operation(s) for sast agents v1 api.

Mend SAST API

The SAST API from Mend — 1 operation(s) for sast.

Mend SAST Applications API

The SAST Applications API from Mend — 3 operation(s) for sast applications.

Mend SAST Custom Rules API

The SAST Custom Rules API from Mend — 2 operation(s) for sast custom rules.

Mend SAST Engines API

The SAST Engines API from Mend — 1 operation(s) for sast engines.

Mend SAST Findings API

The SAST Findings API from Mend — 3 operation(s) for sast findings.

Mend SAST Findings - Product API

The SAST Findings - Product API from Mend — 8 operation(s) for sast findings - product.

Mend SAST Findings - Project API

The SAST Findings - Project API from Mend — 26 operation(s) for sast findings - project.

Mend SAST Findings V4 API

The SAST Findings V4 API from Mend — 3 operation(s) for sast findings v4.

Mend SAST Internal Findings API

The SAST Internal Findings API from Mend — 1 operation(s) for sast internal findings.

Mend SAST Organizations API

The SAST Organizations API from Mend — 1 operation(s) for sast organizations.

Mend SAST Scans API

The SAST Scans API from Mend — 2 operation(s) for sast scans.

Mend SAST Scans V2 API

The SAST Scans V2 API from Mend — 11 operation(s) for sast scans v2.

Mend SAST System Access API

The SAST System Access API from Mend — 1 operation(s) for sast system access.

Mend Scans - Project API

The Scans - Project API from Mend — 10 operation(s) for scans - project.

Mend SCM Scan Requests API

The SCM Scan Requests API from Mend — 1 operation(s) for scm scan requests.

Mend Settings - Add Product To Admins Group API

The Settings - Add Product To Admins Group API from Mend — 1 operation(s) for settings - add product to admins group.

Mend Settings - AI Usage API

The Settings - AI Usage API from Mend — 6 operation(s) for settings - ai usage.

Mend Settings - Alerts API

The Settings - Alerts API from Mend — 3 operation(s) for settings - alerts.

Mend Settings - CLI Version API

The Settings - CLI Version API from Mend — 2 operation(s) for settings - cli version.

Mend Settings - Notifications API

The Settings - Notifications API from Mend — 1 operation(s) for settings - notifications.

Mend Settings - Organization API

The Settings - Organization API from Mend — 1 operation(s) for settings - organization.

Mend Settings - Repo Integration API

The Settings - Repo Integration API from Mend — 1 operation(s) for settings - repo integration.

Mend Statistics - Organization API

The Statistics - Organization API from Mend — 3 operation(s) for statistics - organization.

Mend Statistics - Product API

The Statistics - Product API from Mend — 5 operation(s) for statistics - product.

Mend Statistics - Project API

The Statistics - Project API from Mend — 3 operation(s) for statistics - project.

Mend Suggested Fix Setting Controller API

The suggested-fix-setting-controller API from Mend — 2 operation(s) for suggested-fix-setting-controller.

Mend Summary - Label API

The Summary - Label API from Mend — 1 operation(s) for summary - label.

Mend Summary - Project API

The Summary - Project API from Mend — 2 operation(s) for summary - project.

Mend Summary - Scan API

The Summary - Scan API from Mend — 1 operation(s) for summary - scan.

Mend Suppression Requests API

The Suppression Requests API from Mend — 3 operation(s) for suppression requests.

Mend Tracked Issues API

The Tracked Issues API from Mend — 4 operation(s) for tracked issues.

Mend Usage Events API

The Usage Events API from Mend — 2 operation(s) for usage events.

Mend User Management API

The User Management API from Mend — 4 operation(s) for user management.

Mend User Management - Permissions API

The User Management - Permissions API from Mend — 3 operation(s) for user management - permissions.

Mend User Management - Roles Definitions API

The User Management - Roles Definitions API from Mend — 8 operation(s) for user management - roles definitions.

Mend User Notifications API

The User Notifications API from Mend — 2 operation(s) for user notifications.

Mend Workflows API

The Workflows API from Mend — 13 operation(s) for workflows.

Scroll for all 142

Scroll for all 47

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

Mend MCP Server

Remote MCP server at api-docs.mend.io over HTTP requiring OAuth; 7 tools listed.

Plan details, limits and sources →

Billed by: dev · FinOps profile →

Pricing Plans 1

Published pricing tiers and plan structures.

Mend Plans Pricing

3 plans

PLANS

Service Levels 1

Uptime the provider promises or reports, as SLA4OAI. Read from its own pages; APIs.io runs no monitors.

Mend

SLA

FinOps 1

Cost, billing, and metering signals for API financial operations.

Mend Finops

FINOPS

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Mend Context

120 classes · 225 properties

JSON-LD

Spectral Rules 1

Spectral governance rulesets for linting and validating these APIs.

Mend API Rules

17 rules · 10 errors 4 warnings 3 info

SPECTRAL

OpenAPI Overlays 2

Overlays applied on top of this provider's contracts. Each card says who wrote it: a document the provider publishes, or one API Evangelist derived or generated.

Mend Platform Overlay

2 actions · update · mend-platform-openapi-original.json

DERIVED

Mend Sca Overlay

1 action · update · mend-sca-openapi-original.json

DERIVED

10 properties

JSON SCHEMA

v3.V3TestRunTriggerRequest

3 properties

JSON SCHEMA

Scroll for all 142

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Mend Authentication

http · 1 scheme

SECURITY

Mend Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Mend Trust Center

trust center published

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Mend Agentic Access

293 operations · 150 acting · 3 human-in-the-loop

293 operations · 150 acting

AGENTIC

Resources

Get Started 3

Portal, sign-up, and the first successful call

DeveloperPortal

DeveloperPortal

GettingStarted

GettingStarted

Login

Documentation 2

Reference material describing how the API behaves

Documentation

Documentation

APIReference

APIReference

Agent Surfaces 4

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

MCPServer

LLMsTxt

AgentSkill

Design & Contract 8

Pagination, idempotency, versioning, errors, and events

Spectral

JSONLD

Vocabulary

Conventions

ErrorCatalog

Lifecycle

Conformance

DataModel

Scroll for all 8

Build 2

SDKs, sample code, and the tooling you integrate with

CLI

CLI

GitHubOrganization

GitHubOrganization

Access & Security 5

Authentication, authorization, and security posture

TrustCenter

DomainSecurity

Authentication

TrustCenter

Compliance

Operate 3

Status, limits, changes, and where to get help

ChangeLog

ChangeLog

Support

Support

StatusPage

StatusPage

Commercial 5

Pricing, plans, and the legal terms of use

TermsOfService

PrivacyPolicy

Pricing

Plans

Pricing

Company 3

The organization behind the API

Newsroom

Newsroom

Website

Website

Blog

Blog

Other 5

Properties that don't map to a standard resource type

AgentCard

Hosts

Vendors

CapabilityMap

Overlay

Source (apis.yml)

aid: mend
name: Mend
description: Mend.io (formerly WhiteSource) is a unified application security and AI security platform that helps engineering
  and security teams find and automatically remediate vulnerabilities across open-source dependencies, proprietary code, containers,
  and AI models/agents. Its products span Software Composition Analysis (SCA), Static Application Security Testing (SAST),
  container image scanning, SBOM generation, automated dependency updates (Renovate), and AI-native security for LLM-powered
  applications. Mend exposes a REST-compliant AppSec Platform API (v3.0) and an SCA API (v2.0) for automating scans, projects,
  applications, findings, reports, and administration, secured with a short-lived per-organization JWT obtained from a user
  key.
url: https://raw.githubusercontent.com/api-evangelist/mend/refs/heads/main/apis.yml
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: false
  label: Hosted service · you call their endpoint
  confidence: medium
  source:
  - openapi
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: paid
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Paid
  confidence: medium
  source:
  - plans
  - authentication
  - security
  generated: '2026-11-06'
  method: derived
image: https://api-docs.mend.io/assets/mend-io-logo.06cad8388af3f063d8c0af6ef0386393959988075733a762b0899791865771ba.9c1bb791.svg
x-type: company
x-source: vc-portfolio
x-backed-by:
- lightspeed-venture-partners
x-tier: profiled
x-tier-reason: enrichment pass 2026-10-04 (modular-v1; was portfolio-lead)
specificationVersion: '0.23'
created: '2026-07-17'
modified: '2026-07-20'
tags:
- Application Security
- Software Composition Analysis
- SAST
- Container Security
- AI Security
- Dependency Management
- Vulnerability Management
- DevSecOps
- SBOM
- Open Source Security
- Company
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Spectral
  url: rules/mend-rules.yml
- type: JSONLD
  url: json-ld/mend-context.jsonld
- type: Vocabulary
  url: vocabulary/mend-vocabulary.yml
- type: AgentCard
  url: a2a/mend-a2a.yml
- type: Hosts
  url: hosts/mend-hosts.yml
- type: Vendors
  url: vendors/mend-vendors.yml
- type: TermsOfService
  url: https://www.mend.io/terms-of-service
- type: PrivacyPolicy
  url: https://www.mend.io/privacy-policy
- type: Newsroom
  url: https://www.mend.io/newsroom/
- type: Pricing
  url: https://www.mend.io/pricing/
- type: Plans
  url: plans/mend-plans-pricing.yml
- type: CapabilityMap
  url: capabilities/mend-capability-edges.yml
  name: Mend Business Capability Map
- type: Overlay
  url: overlays/mend-platform-overlay.yaml
- type: AgenticAccess
  url: agentic-access/mend-agentic-access.yml
- type: TrustCenter
  url: security/mend-trust-center.yml
- type: DomainSecurity
  url: security/mend-domain-security.yml
- type: Authentication
  url: authentication/mend-authentication.yml
- type: Conventions
  url: conventions/mend-conventions.yml
- type: ErrorCatalog
  url: errors/mend-problem-types.yml
- type: Lifecycle
  url: lifecycle/mend-lifecycle.yml
- type: ChangeLog
  url: changelog/mend-changelog.yml
- type: Conformance
  url: conformance/mend-conformance.yml
- type: DataModel
  url: data-model/mend-data-model.yml
- type: MCPServer
  url: mcp/mend-mcp.yml
- type: LLMsTxt
  url: llms/mend-llms.txt
- type: CLI
  url: cli/mend-cli.yml
- type: AgentSkill
  url: skills/_index.yml
- url: https://www.mend.io/
  type: Website
- url: https://api-docs.mend.io/
  type: DeveloperPortal
- url: https://docs.mend.io/
  type: Documentation
- url: https://api-docs.mend.io/platform/3.0
  type: APIReference
- url: https://docs.mend.io/platform/latest/getting-started-with-mend-api-3-0
  type: GettingStarted
- url: https://support.mend.io/
  type: Support
- url: https://www.mend.io/blog/
  type: Blog
- url: https://www.mend.io/pricing/
  type: Pricing
- url: https://www.mend.io/integrations/
  type: Integrations
- url: https://saas.mend.io/login
  type: Login
- url: https://github.com/mend-toolkit
  type: GitHubOrganization
- url: https://status.mend.io/
  type: StatusPage
- url: https://trust.mend.io/
  type: TrustCenter
- url: https://trust.mend.io/
  type: Compliance
apis:
- aid: mend:mend-access-management-api
  name: Mend Access Management API
  description: The Access Management API from Mend — 5 operation(s) for access management.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Identity and Access Management
  tags_raw:
  - Access Management
  properties:
  - type: OpenAPI
    url: openapi/mend-access-management-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-login-model-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-login-model-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-session-info-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-v3-access-token-response-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-v3-login-response-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-session-info-schema.json
- aid: mend:mend-access-management-organizations-api
  name: Mend Access Management - Organizations API
  description: The Access Management - Organizations API from Mend — 2 operation(s) for access management - organizations.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Access Management - Organizations
  properties:
  - type: OpenAPI
    url: openapi/mend-access-management-organizations-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-collection-domain-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-session-info-schema.json
- aid: mend:mend-administration-groups-api
  name: Mend Administration - Groups API
  description: The Administration - Groups API from Mend — 6 operation(s) for administration - groups.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Administration - Groups
  properties:
  - type: OpenAPI
    url: openapi/mend-administration-groups-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-list-group-with-role-definitions-summary-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-list-multiple-group-roles-per-context-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-list-group-summary-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-list-user-info-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-group-role-request-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-update-group-request-dto-schema.json
- aid: mend:mend-administration-labels-api
  name: Mend Administration - Labels API
  description: The Administration - Labels API from Mend — 2 operation(s) for administration - labels.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Administration - Labels
  properties:
  - type: OpenAPI
    url: openapi/mend-administration-labels-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-list-organization-label-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-domain-label-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-organization-label-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-v3-message-dto-schema.json
- aid: mend:mend-administration-users-api
  name: Mend Administration - Users API
  description: The Administration - Users API from Mend — 5 operation(s) for administration - users.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Administration - Users
  properties:
  - type: OpenAPI
    url: openapi/mend-administration-users-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-list-user-info-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-v3-user-info-response-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-v3-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-v3-boolean-schema.json
  - type: JSONSchema
    url: json-schema/mend-invite-user-request-dto-schema.json
- aid: mend:mend-ai-api
  name: Mend AI API
  description: The AI API from Mend — 1 operation(s) for ai.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Artificial Intelligence
  tags_raw:
  - AI
  properties:
  - type: OpenAPI
    url: openapi/mend-ai-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-v3-v3-implementation-weakness-response-schema.json
- aid: mend:mend-alerts-product-api
  name: Mend Alerts - Product API
  description: The Alerts - Product API from Mend — 3 operation(s) for alerts - product.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Alerts - Product
  properties:
  - type: OpenAPI
    url: openapi/mend-alerts-product-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-legal-and-compliance-alert-base-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-security-alert-library-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-security-alert-dto-schema.json
- aid: mend:mend-alerts-project-api
  name: Mend Alerts - Project API
  description: The Alerts - Project API from Mend — 6 operation(s) for alerts - project.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Alerts - Project
  properties:
  - type: OpenAPI
    url: openapi/mend-alerts-project-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-legal-and-compliance-alert-base-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-security-alert-library-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-security-alert-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-update-risk-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-boolean-schema.json
- aid: mend:mend-applications-api
  name: Mend Applications API
  description: The Applications API from Mend — 8 operation(s) for applications.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Application
  tags_raw:
  - Applications
  properties:
  - type: OpenAPI
    url: openapi/mend-applications-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-multi-context-request-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-list-application-summary-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-collection-application-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-list-scan-summary-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-sbom-scan-response-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-label-request-dtov3-schema.json
- aid: mend:mend-asynchronous-process-control-api
  name: Mend Asynchronous Process Control API
  description: The Asynchronous Process Control API from Mend — 1 operation(s) for asynchronous process control.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Asynchronous Process Control
  properties:
  - type: OpenAPI
    url: openapi/mend-asynchronous-process-control-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-async-process-status-v2-dto-schema.json
- aid: mend:mend-customattribute-organization-api
  name: Mend CustomAttribute - Organization API
  description: The CustomAttribute - Organization API from Mend — 2 operation(s) for customattribute - organization.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - CustomAttribute - Organization
  properties:
  - type: OpenAPI
    url: openapi/mend-customattribute-organization-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-list-custom-attribute-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-custom-attribute-value-dto-schema.json
- aid: mend:mend-customattribute-product-api
  name: Mend CustomAttribute - Product API
  description: The CustomAttribute - Product API from Mend — 1 operation(s) for customattribute - product.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - CustomAttribute - Product
  properties:
  - type: OpenAPI
    url: openapi/mend-customattribute-product-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-custom-attribute-value-dto-schema.json
- aid: mend:mend-customattribute-project-api
  name: Mend CustomAttribute - Project API
  description: The CustomAttribute - Project API from Mend — 1 operation(s) for customattribute - project.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - CustomAttribute - Project
  properties:
  - type: OpenAPI
    url: openapi/mend-customattribute-project-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-custom-attribute-value-dto-schema.json
- aid: mend:mend-dependencies-source-files-api
  name: Mend Dependencies Source Files API
  description: The Dependencies Source Files API from Mend — 8 operation(s) for dependencies source files.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Dependencies Source Files
  properties:
  - type: OpenAPI
    url: openapi/mend-dependencies-source-files-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-source-file-remapping-app-request-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-source-file-remapping-org-request-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-library-match-suggestions-request-dtov3-match-suggestions-schema.json
  - type: JSONSchema
    url: json-schema/mend-source-files-remapping-async-status-dto-v3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-collection-source-file-inventory-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-v3-collection-source-library-response-dto-match-suggestions-schema.json
- aid: mend:mend-domain-controller-api
  name: Mend Domain Controller API
  description: The domain-controller API from Mend — 1 operation(s) for domain-controller.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - domain-controller
  properties:
  - type: OpenAPI
    url: openapi/mend-domain-controller-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-collection-domain-dto-schema.json
- aid: mend:mend-entities-organization-api
  name: Mend Entities - Organization API
  description: The Entities - Organization API from Mend — 7 operation(s) for entities - organization.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Entities - Organization
  properties:
  - type: OpenAPI
    url: openapi/mend-entities-organization-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-domain-entities-product-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-domain-entities-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-product-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-project-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-created-create-project-response-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-created-product-dto-schema.json
- aid: mend:mend-entities-product-api
  name: Mend Entities - Product API
  description: The Entities - Product API from Mend — 2 operation(s) for entities - product.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Entities - Product
  properties:
  - type: OpenAPI
    url: openapi/mend-entities-product-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-project-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-created-project-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-create-project-by-product-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-context-entity-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-product-dto-schema.json
- aid: mend:mend-entities-project-api
  name: Mend Entities - Project API
  description: The Entities - Project API from Mend — 3 operation(s) for entities - project.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Entities - Project
  properties:
  - type: OpenAPI
    url: openapi/mend-entities-project-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-project-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-vitals-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-context-entity-request-dto-schema.json
- aid: mend:mend-findings-project-api
  name: Mend Findings - Project API
  description: The Findings - Project API from Mend — 26 operation(s) for findings - project.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Findings - Project
  properties:
  - type: OpenAPI
    url: openapi/mend-findings-project-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-model-security-finding-external-schema.json
  - type: JSONSchema
    url: json-schema/mend-github-com-mend-cloud-native-modules-common-model-finding-status-schema.json
  - type: JSONSchema
    url: json-schema/mend-github-com-mend-cloud-native-modules-scanner-model-secret-finding-schema.json
  - type: JSONSchema
    url: json-schema/mend-dto-patch-finding-schema.json
- aid: mend:mend-findings-scan-api
  name: Mend Findings - Scan API
  description: The Findings - Scan API from Mend — 5 operation(s) for findings - scan.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Findings - Scan
  properties:
  - type: OpenAPI
    url: openapi/mend-findings-scan-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-model-security-finding-external-schema.json
  - type: JSONSchema
    url: json-schema/mend-github-com-mend-cloud-native-modules-scanner-model-secret-finding-schema.json
  - type: JSONSchema
    url: json-schema/mend-dto-mend-cursored-response-array-dto-finding-v3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dto-mend-response-dto-finding-v3-schema.json
  - type: JSONSchema
    url: json-schema/mend-common-base-api-response-v3-schema.json
  - type: JSONSchema
    url: json-schema/mend-github-com-mend-cloud-native-modules-scanner-model-package-schema.json
- aid: mend:mend-general-info-licenses-api
  name: Mend General Info - Licenses API
  description: The General Info - Licenses API from Mend — 2 operation(s) for general info - licenses.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - General Info - Licenses
  properties:
  - type: OpenAPI
    url: openapi/mend-general-info-licenses-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-license-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-license-dto-schema.json
- aid: mend:mend-general-info-permissions-api
  name: Mend General Info - Permissions API
  description: The General Info - Permissions API from Mend — 1 operation(s) for general info - permissions.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - General Info - Permissions
  properties:
  - type: OpenAPI
    url: openapi/mend-general-info-permissions-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-list-role-permissions-dto-schema.json
- aid: mend:mend-general-info-vulnerabilities-api
  name: Mend General Info - Vulnerabilities API
  description: The General Info - Vulnerabilities API from Mend — 2 operation(s) for general info - vulnerabilities.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - General Info - Vulnerabilities
  properties:
  - type: OpenAPI
    url: openapi/mend-general-info-vulnerabilities-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-vulnerability-fix-summary-info-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-vulnerability-profile-dto-schema.json
- aid: mend:mend-integrations-api
  name: Mend Integrations API
  description: The Integrations API from Mend — 1 operation(s) for integrations.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Integration
  tags_raw:
  - Integrations
  properties:
  - type: OpenAPI
    url: openapi/mend-integrations-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-v3-list-integration-dtov3-schema.json
- aid: mend:mend-library-organization-api
  name: Mend Library - Organization API
  description: The Library - Organization API from Mend — 10 operation(s) for library - organization.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Library - Organization
  properties:
  - type: OpenAPI
    url: openapi/mend-library-organization-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-library-version-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-list-light-library-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-project-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-copyright-reference-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-in-house-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-library-license-request-dto-schema.json
- aid: mend:mend-library-product-api
  name: Mend Library - Product API
  description: The Library - Product API from Mend — 6 operation(s) for library - product.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Library - Product
  properties:
  - type: OpenAPI
    url: openapi/mend-library-product-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-list-vulnerability-profile-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-list-due-diligence-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-list-light-library-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-project-list-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-list-project-library-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-collection-project-dto-schema.json
- aid: mend:mend-library-project-api
  name: Mend Library - Project API
  description: The Library - Project API from Mend — 5 operation(s) for library - project.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Library - Project
  properties:
  - type: OpenAPI
    url: openapi/mend-library-project-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-list-due-diligence-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-list-light-library-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-list-library-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-list-vulnerability-profile-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-collection-library-impact-dto-schema.json
- aid: mend:mend-library-source-files-api
  name: Mend Library - Source Files API
  description: The Library - Source Files API from Mend — 2 operation(s) for library - source files.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Library - Source Files
  properties:
  - type: OpenAPI
    url: openapi/mend-library-source-files-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-source-file-inventory-dto-schema.json
- aid: mend:mend-policies-organization-api
  name: Mend Policies - Organization API
  description: The Policies - Organization API from Mend — 4 operation(s) for policies - organization.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Policies - Organization
  properties:
  - type: OpenAPI
    url: openapi/mend-policies-organization-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-policy-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-update-priorities-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-collection-policy-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-async-process-status-v2-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-policy-dto-schema.json
- aid: mend:mend-policies-product-api
  name: Mend Policies - Product API
  description: The Policies - Product API from Mend — 4 operation(s) for policies - product.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Policies - Product
  properties:
  - type: OpenAPI
    url: openapi/mend-policies-product-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-policy-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-update-priorities-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-collection-policy-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-async-process-status-v2-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-policy-dto-schema.json
- aid: mend:mend-policies-project-api
  name: Mend Policies - Project API
  description: The Policies - Project API from Mend — 4 operation(s) for policies - project.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Policies - Project
  properties:
  - type: OpenAPI
    url: openapi/mend-policies-project-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-policy-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-update-priorities-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-collection-policy-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-async-process-status-v2-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-policy-dto-schema.json
- aid: mend:mend-product-attribution-report-controller-api
  name: Mend Product Attribution Report Controller API
  description: The product-attribution-report-controller API from Mend — 1 operation(s) for product-attribution-report-controller.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - product-attribution-report-controller
  properties:


# --- truncated at 32 KB (82 KB total) ---
# Full source: https://artifacts.apis.io/mend/apis.yml

Mend API — frequently asked questions

Does Mend have an API?

Yes. APIs.io lists 142 APIs from Mend, including Mend Access Management API, Mend Access Management - Organizations API and Mend Administration - Groups API, and 139 more.

Is there an OpenAPI specification for the Mend API?

Yes. APIs.io indexes 142 OpenAPI specifications for Mend, each linked for download from this page.

How do I authenticate with the Mend API?

Mend uses bearer-token authentication (http · 1 scheme). The details are profiled on APIs.io as Mend Authentication.

How much does the Mend API cost?

Mend publishes its prices; its Mend AppSec plan is Up to $1000 per dev/ per year as of 2026-09-20. APIs.io lists 3 pricing plans for Mend, with each plan's price, limits and inclusions under Pricing on this page.

Does Mend have an MCP server?

Yes. APIs.io lists 1 MCP server for Mend: Remote MCP server at api-docs.mend.io over HTTP requiring OAuth; 7 tools listed.

Is the Mend API ready for AI agents?

Mend has a Kin Score of 64.9 out of 100 (strong) and an Agent Readiness score of 26.6 (agent-aware), scored by API Evangelist on 2026-11-06.

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/mend"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/mend/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/mend/evidence"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.