Onapsis

Onapsis Platform API

GraphQL-based public API for The Onapsis Platform. Introduced with support for Assess (vulnerability and scan results) and preliminary support for Comply, it powers third-party integrations with ticketing and SIEM tooling, custom filtered reporting, and multi-tenant MSSP views. Authentication is an API key generated in the Onapsis console UI, exchanged at POST /api/v1/token for a bearer access token used on subsequent GraphQL requests. The endpoint is served from the customer's own Onapsis console host, so there is no shared public base URL.

GitHub

Documentation

📖
Authentication
https://raw.githubusercontent.com/api-evangelist/onapsis/refs/heads/main/authentication/onapsis-authentication.yml

Other Resources

🔗
Conformance
https://raw.githubusercontent.com/api-evangelist/onapsis/refs/heads/main/conformance/onapsis-conformance.yml
🔗
APIsJSON
https://raw.githubusercontent.com/api-evangelist/onapsis/refs/heads/main/apis.yml

API entry from apis.yml

apis.yml Raw ↑ 
aid: onapsis:platform-graphql
name: Onapsis Platform API
description: GraphQL-based public API for The Onapsis Platform. Introduced with support for Assess (vulnerability
  and scan results) and preliminary support for Comply, it powers third-party integrations with ticketing
  and SIEM tooling, custom filtered reporting, and multi-tenant MSSP views. Authentication is an API key
  generated in the Onapsis console UI, exchanged at POST /api/v1/token for a bearer access token used
  on subsequent GraphQL requests. The endpoint is served from the customer's own Onapsis console host,
  so there is no shared public base URL.
humanURL: https://onapsis.com/blog/new-year-new-api-new-onapsis-api-custom-workflows-integrations/
baseURL: https://{onapsis-console-host}/graphql
tags:
- GraphQL
- Vulnerability Management
- SAP
- Security
properties:
- type: Authentication
  url: authentication/onapsis-authentication.yml
- type: Conformance
  url: conformance/onapsis-conformance.yml