Rapid7 Attack Templates API

An Attack Template describes if and how Attacks should be executed during the execution of a Scan. There exist pre-defined, system-provided and immutable templates, as well as custom templates. An Attack Template is a top-level resource within the product, and as such is not affected by the deletion of any Apps.

Operations 10

GET /attack-templates Get Attack Templates #
POST /attack-templates Create Attack Template #
GET /attack-templates/module-configs Get Attack Modules Configs #
GET /attack-templates/{attack-template-id} Get Attack Template #
PUT /attack-templates/{attack-template-id} Update Attack Template #
DELETE /attack-templates/{attack-template-id} Delete Attack Template #
GET /attack-templates/{attack-template-id}/modules Get Attack Modules #
POST /attack-templates/{attack-template-id}/modules Create Attack Module #
PUT /attack-templates/{attack-template-id}/modules/{attack-module-id} Update Attack Module #
DELETE /attack-templates/{attack-template-id}/modules/{attack-module-id} Delete Attack Module #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/rapid7-attack-templates-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

rapid7-attack-templates-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: InsightAppSec Attack Templates API
  description: Welcome to the reference documentation for the public APIs available for InsightAppSec.
  version: v1
servers:
- url: https://[region].api.insight.rapid7.com/ias/v1
tags:


# --- truncated at 32 KB (32 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/rapid7/refs/heads/main/openapi/rapid7-attack-templates-api-openapi.yml