Mist Sites Assets API
An Asset refers to any equipment or item that is being tracked and monitored using Bluetooth Low Energy (BLE) beacon tags. This requires the Asset Visibility subscription.
OpenAPI Specification
openapi: 3.1.0
info:
contact:
email: tmunzer@juniper.net
name: Thomas Munzer
description: '> Version: **2606.1.1**
>
> Date: **July 10, 2026**
<div class="notification"> NOTE:<br>Some important API changes will be introduced. Please make sure to read the <a href="https://www.juniper.net/documentation/us/en/software/mist/api/http/guides/important-api-changes">announcements</a> </div>
---
## Additional Documentation
* [Mist Automation Guide](https://www.juniper.net/documentation/us/en/software/mist/automation-integration/index.html)
* [Mist Location SDK](https://www.juniper.net/documentation/us/en/software/mist/location-services/topics/concept/mist-how-get-mist-sdk.html)
* [Mist Product Updates](https://www.juniper.net/documentation/us/en/software/mist/product-updates/)
## Helpful Resources
* [API Sandbox and Exercises](https://api-class.mist.com/)
* [Postman Collection, Runners and Webhook Samples](https://www.postman.com/juniper-mist/workspace/mist-systems-s-public-workspace)
* [Python Script Examples](https://github.com/tmunzer/mist_library)
* [API Demo Apps](https://apps.mist-lab.fr/)
* [Juniper Blog](https://blogs.juniper.net/)
## Mist Web Browser Extension:
* Google Chrome, Microsoft Edge and other Chromium-based browser: [Chrome Web Store](https://chromewebstore.google.com/detail/mist-extension/ejhpdcljeamillfhdihkkmoakanpbplh)
* Firefox: [Firefox Add-ons](https://addons.mozilla.org/en-US/firefox/addon/mist-extension/)
---'
license:
name: MIT
url: https://raw.githubusercontent.com/tmunzer/Mist-OAS3.0/main/LICENSE
title: Mist Admins Sites Assets API
version: 2606.1.1
x-logo:
altText: Juniper-MistAI
backgroundColor: '#FFFFFF'
url: https://www.mist.com/wp-content/uploads/logo.png
servers:
- description: Mist Global 01
url: https://api.mist.com
- description: Mist Global 02
url: https://api.gc1.mist.com
- description: Mist Global 03
url: https://api.ac2.mist.com
- description: Mist Global 04
url: https://api.gc2.mist.com
- description: Mist Global 05
url: https://api.gc4.mist.com
- description: Mist EMEA 01
url: https://api.eu.mist.com
- description: Mist EMEA 02
url: https://api.gc3.mist.com
- description: Mist EMEA 03
url: https://api.ac6.mist.com
- description: Mist EMEA 04
url: https://api.gc6.mist.com
- description: Mist APAC 01
url: https://api.ac5.mist.com
- description: Mist APAC 02
url: https://api.gc5.mist.com
- description: Mist APAC 03
url: https://api.gc7.mist.com
security:
- apiToken: []
- csrfToken: []
tags:
- description: 'An Asset refers to any equipment or item that is being tracked and monitored using Bluetooth Low Energy (BLE) beacon tags.
This requires the Asset Visibility subscription.'
name: Sites Assets
paths:
/api/v1/sites/{site_id}/assets:
parameters:
- $ref: '#/components/parameters/site_id'
get:
description: List assets for a site. Use [List Org Assets](/#operations/listOrgAssets) to retrieve assets across the organization.
operationId: listSiteAssets
parameters:
- $ref: '#/components/parameters/limit'
- $ref: '#/components/parameters/page'
responses:
'200':
$ref: '#/components/responses/AssetsArray'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: listSiteAssets
tags:
- Sites Assets
post:
description: Create Site Asset
operationId: createSiteAsset
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/asset'
description: Request Body
responses:
'200':
$ref: '#/components/responses/Asset'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: createSiteAsset
tags:
- Sites Assets
/api/v1/sites/{site_id}/assets/import:
parameters:
- $ref: '#/components/parameters/site_id'
post:
description: "Import Site Assets. \n\nIt can be done via a CSV file or a JSON payload.\n\n## CSV File Format\n```csv\nname,mac\n\"asset_name\",5c5b53010101\n```"
operationId: importSiteAssets
parameters:
- description: 'Whether to replace existing assets with the same MAC address during import. enum: `False`, `True`'
in: query
name: upsert
schema:
$ref: '#/components/schemas/import_site_assets_upsert'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/assets_import_json'
multipart/form-data:
schema:
$ref: '#/components/schemas/assets_import_file'
responses:
'200':
$ref: '#/components/responses/OK'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: importSiteAssets
tags:
- Sites Assets
/api/v1/sites/{site_id}/assets/{asset_id}:
parameters:
- $ref: '#/components/parameters/site_id'
- $ref: '#/components/parameters/asset_id'
delete:
description: Delete Site Asset
operationId: deleteSiteAsset
responses:
'200':
$ref: '#/components/responses/OK'
'201':
description: Created
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: deleteSiteAsset
tags:
- Sites Assets
get:
description: Get Site Asset Details
operationId: getSiteAsset
responses:
'200':
$ref: '#/components/responses/Asset'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: getSiteAsset
tags:
- Sites Assets
put:
description: Update Site Asset
operationId: updateSiteAsset
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/asset'
description: Request Body
responses:
'200':
$ref: '#/components/responses/Asset'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: updateSiteAsset
tags:
- Sites Assets
/api/v1/sites/{site_id}/assets/{asset_id}/image:
parameters:
- $ref: '#/components/parameters/site_id'
- $ref: '#/components/parameters/asset_id'
delete:
description: Delete Site Asset Image
operationId: deleteSiteAssetImage
responses:
'200':
$ref: '#/components/responses/OK'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: deleteSiteAssetImage
tags:
- Sites Assets
post:
description: Attach Image to Site Asset
operationId: attachSiteAssetImage
requestBody:
content:
multipart/form-data:
schema:
$ref: '#/components/schemas/image_import'
responses:
'200':
$ref: '#/components/responses/OK'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: attachSiteAssetImage
tags:
- Sites Assets
components:
responses:
AssetsArray:
content:
application/json:
schema:
$ref: '#/components/schemas/assets'
application/vnd.api+json:
schema:
$ref: '#/components/schemas/assets'
description: OK
OK:
description: OK
HTTP400:
content:
application/json:
examples:
Example:
$ref: '#/components/examples/HTTP400Example'
schema:
$ref: '#/components/schemas/response_http400'
application/vnd.api+json:
examples:
Example:
$ref: '#/components/examples/HTTP400Example'
schema:
$ref: '#/components/schemas/response_http400'
description: Bad Syntax
HTTP403:
content:
application/json:
examples:
Example:
$ref: '#/components/examples/HTTP403Example'
schema:
$ref: '#/components/schemas/response_http403'
application/vnd.api+json:
examples:
Example:
$ref: '#/components/examples/HTTP403Example'
schema:
$ref: '#/components/schemas/response_http403'
description: Permission Denied
Asset:
content:
application/json:
examples:
Example:
$ref: '#/components/examples/AssetExample'
schema:
$ref: '#/components/schemas/asset'
application/vnd.api+json:
examples:
Example:
$ref: '#/components/examples/AssetExample'
schema:
$ref: '#/components/schemas/asset'
description: OK
HTTP404:
content:
application/json:
schema:
$ref: '#/components/schemas/response_http404'
application/vnd.api+json:
schema:
$ref: '#/components/schemas/response_http404'
description: Not found. The API endpoint doesn’t exist or resource doesn’ t exist
HTTP429:
content:
application/json:
examples:
Example:
$ref: '#/components/examples/HTTP429Example'
schema:
$ref: '#/components/schemas/response_http429'
application/vnd.api+json:
examples:
Example:
$ref: '#/components/examples/HTTP429Example'
schema:
$ref: '#/components/schemas/response_http429'
description: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold
HTTP401:
content:
application/json:
examples:
Example:
$ref: '#/components/examples/HTTP401Example'
schema:
$ref: '#/components/schemas/response_http401'
application/vnd.api+json:
examples:
Example:
$ref: '#/components/examples/HTTP401Example'
schema:
$ref: '#/components/schemas/response_http401'
description: Unauthorized
examples:
AssetExample:
value:
created_time: 0
id: b069b358-4c97-5319-1f8c-7c5ca64d6ab1
mac: string
map_id: b069b358-4c97-5319-1f8c-7c5ca64d6ab1
modified_time: 0
name: string
org_id: b069b358-4c97-5319-1f8c-7c5ca64d6ab1
site_id: b069b358-4c97-5319-1f8c-7c5ca64d6ab1
tag_id: 6f4bf402-45f9-2a56-6c8b-7f83d3bc98e9
HTTP403Example:
value:
detail: You do not have permission to perform this action.
HTTP400Example:
value:
detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)'
HTTP429Example:
value:
detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold
HTTP401Example:
value:
detail: Authentication credentials were not provided.
schemas:
image_import:
additionalProperties: false
description: Multipart image upload payload
properties:
file:
contentMediaType: application/octet-stream
description: Image file content uploaded as multipart form data
type: string
json:
description: Optional JSON metadata submitted with the image upload
type: string
required:
- file
type: object
id:
description: Unique ID of the object instance in the Mist Organization
examples:
- 53f10664-3ce8-4c27-b382-0ef66432349f
format: uuid
readOnly: true
type: string
org_id:
description: Unique identifier of a Mist organization
examples:
- a97c1b22-a4e9-411e-9bfd-d8695a0f9e61
format: uuid
readOnly: true
type: string
response_http401:
additionalProperties: false
description: Standard HTTP 401 authentication error response
properties:
detail:
description: Human-readable explanation of the authentication error
examples:
- Authentication credentials were not provided.
type: string
type: object
response_http429:
additionalProperties: false
description: Standard HTTP 429 rate limit error response
properties:
detail:
description: Human-readable explanation of the rate limit error
examples:
- Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold
type: string
type: object
asset_import:
additionalProperties: false
description: Asset record supplied in a JSON import payload
properties:
mac:
description: Bluetooth MAC address used to identify the imported BLE asset
minLength: 1
type: string
name:
description: Display name for the imported BLE asset
minLength: 1
type: string
required:
- name
- mac
type: object
created_time:
description: When the object has been created, in epoch
format: double
readOnly: true
type: number
assets_import_file:
additionalProperties: false
description: CSV file upload payload for importing BLE assets
properties:
file:
contentMediaType: application/octet-stream
description: CSV file containing asset records to import
type: string
type: object
response_http403:
additionalProperties: false
description: Standard HTTP 403 permission error response
properties:
detail:
description: Human-readable explanation of the permission error
examples:
- You do not have permission to perform this action.
type: string
type: object
import_site_assets_upsert:
default: 'False'
description: 'Whether site asset import should update matching existing assets. enum: `False`, `True`'
enum:
- 'False'
- 'True'
type: string
response_http400:
additionalProperties: false
description: Standard HTTP 400 bad request error response
properties:
detail:
description: Human-readable explanation of the bad request error
examples:
- 'JSON parse error - Expecting value: line 5 column 8 (char 56)'
type: string
type: object
assets:
description: List of named BLE asset records
items:
$ref: '#/components/schemas/asset'
type: array
site_id:
description: Unique identifier of a Mist site
examples:
- 441a1214-6928-442a-8e92-e1d34b8ec6a6
format: uuid
readOnly: true
type: string
modified_time:
description: When the object has been modified for the last time, in epoch
format: double
readOnly: true
type: number
assets_import_json:
description: BLE asset records supplied in a JSON import payload
examples:
- - mac: a31eb04e1c38
name: Expensive Instrument
- mac: a31eb04e1c37
name: Cheap Instrument
items:
$ref: '#/components/schemas/asset_import'
minItems: 1
type: array
uniqueItems: true
response_http404:
additionalProperties: false
description: Standard HTTP 404 not found error response
properties:
id:
description: Missing resource identifier, when the API includes one
type: string
type: object
asset:
description: Named Bluetooth Low Energy asset record
properties:
created_time:
$ref: '#/components/schemas/created_time'
description: Timestamp when this asset record was created
for_site:
description: Whether this asset is scoped directly to a site
readOnly: true
type: boolean
id:
$ref: '#/components/schemas/id'
description: Unique identifier of the asset record
mac:
description: Bluetooth MAC address used to identify the BLE asset
type: string
map_id:
description: Identifier of the map associated with this asset, when specified
format: uuid
type: string
modified_time:
$ref: '#/components/schemas/modified_time'
description: Timestamp when this asset record was last modified
name:
description: Display name or label for the BLE asset
type: string
org_id:
$ref: '#/components/schemas/org_id'
description: Owning organization identifier for this asset
site_id:
$ref: '#/components/schemas/site_id'
description: Identifier of the site associated with this asset
tag_id:
description: BLE tag identifier associated with this asset
format: uuid
type: string
required:
- name
- mac
type: object
parameters:
asset_id:
in: path
name: asset_id
required: true
schema:
examples:
- 000000ab-00ab-00ab-00ab-0000000000ab
format: uuid
type: string
limit:
description: Maximum number of results to return per page
in: query
name: limit
schema:
default: 100
minimum: 0
type: integer
page:
description: Select the page number to return when using page-based pagination; starts at `1`
in: query
name: page
schema:
default: 1
minimum: 1
type: integer
site_id:
in: path
name: site_id
required: true
schema:
examples:
- 000000ab-00ab-00ab-00ab-0000000000ab
format: uuid
type: string
securitySchemes:
apiToken:
description: "Preferred authentication method for automation and integrations. Send the API token in the HTTP `Authorization` header.\n\n**Format**:\n `Authorization: Token {apitoken}`\n\n**Notes**:\n* An API token generated for a specific admin has the same privileges as that admin\n* An API token is automatically removed if it is not used for more than 90 days\n* SSO admins cannot generate admin API tokens. Use organization API tokens when scoped Org/Site privileges are needed."
in: header
name: Authorization
type: apiKey
csrfToken:
description: 'Session-based authentication for browser or login/password flows. After a successful [Login](/#operations/login) request, Mist returns a `csrftoken` cookie. Send that value in the `X-CSRFToken` header on later API requests that use the login session.
**Format**:
```
X-CSRFToken: vwvBuq9qkqaKh7lu8tNc0gkvBfEaLAmx
```
For automation, API Token authentication is preferred.'
in: header
name: X-CSRFToken
type: apiKey