Rapid7 Credential API

openapi: 3.1.0
info:
  title: InsightAppSec Accounts Credential API
  description: '<p>Welcome to the reference documentation for the public APIs available for InsightAppSec.</p><p>Here are a few resources to help you learn how to start using our APIs:</p><ul><li><a href=''https://insight.help.rapid7.com/docs/api-overview''>Learn about basic concepts and capabilities</a></li><li><a href=''https://insight.help.rapid7.com/docs/managing-platform-api-keys''>Get an Insight platform API key to set up authentication</a></li><li><a href=''https://insight.help.rapid7.com/docs/product-apis''>See available Insight product APIs</a></li><li><a href=''https://insightappsec.help.rapid7.com/docs''>Learn more about InsightAppSec</a></li></ul><p>After you''ve got the basics down, you can use this API guide to find examples of requests and responses.</p></p><h2>Permissions</h2><p>This API uses the platform role of a user''s API key to inherit a set of permissions.</p><p><b>Notes</b>:<li>Platform Admins do not require explicit access to an App in order to see it, or anything associated with it</li><li>Organization keys will inherit Product Admin permissions.</li></p><table><thead><tr><th>Role</th><th>Permissions</th></tr></thead><tbody><tr><td>Product Admin</td><td><li><code>Manage Apps</code></li><li><code>Read Attack Templates</code></li><li><code>Manage Targets</code><li><code>Manage Scan Configs</code><li><code>Manage Scans</code></li><li><code>Manage Vulnerabilities</code></li><li><code>Administer Vulnerability Comments</code></li><li><code>Manage Engines</code></li><li><code>Manage Engine Groups</code></li><li><code>Manage Schedules</code></li><li><code>Manage Blackouts</code></li><li><code>Manage Global Blackouts</code></li><li><code>Manage Files</code></li><li><code>Manage Tags</code></li><li><code>Manage PDF Report</code></li></td></tr><tr><td>Read Write</td><td><li><code>Manage Apps</code></li><li><code>Read Attack Templates</code></li><li><code>Read Targets</code><li><code>Manage Scan Configs</code><li><code>Manage Scans</code></li><li><code>Manage Vulnerabilities</code></li><li><code>Manage Vulnerability Comments</code></li><li><code>Read Engines</code></li><li><code>Read Engine Groups</code></li><li><code>Manage Schedules</code></li><li><code>Manage Blackouts</code></li><li><code>Manage Files</code></li><li><code>Manage Tags</code></li><li><code>Manage PDF Report</code></li></td></tr><tr><td>Read Only</td><td><li><code>Read Apps</code></li><li><code>Read Attack Templates</code></li><li><code>Read Targets</code><li><code>Read Scan Configs</code><li><code>Read Scans</code></li><li><code>Read Vulnerabilities</code></li><li><code>Read Vulnerability Comments</code></li><li><code>Read Engines</code></li><li><code>Read Engine Groups</code></li><li><code>Read Schedules</code></li><li><code>Read Blackouts</code></li><li><code>Read Files</code></li><li><code>Read Tags</code></li><li><code>Read PDF Report</code></li></td></tr></tbody><table><a href="#pagination"><h2 id="pagination">Pagination Parameters</h2></a><p>The following query parameters can be used to control the order, offset and size of the returned data</p><table><thead><tr><th>Parameter</th><th>Description</th><th>Example</th></tr></thead><tbody><tr><td><code>index</code></td><td><p>The 0-based index of the page of data desired (default: 0)<p></td><td><code>?index=2</code></td></tr><tr><td><code>size</code></td><td><p>The size of the page of data desired (min: 1, max: 1000, default: 50)<p></td><td><code>?size=10</code></td></tr><tr><td><code>sort</code></td><td><p>The sort terms and (optional) directions for the desired ordering of data (default: specific to each resource)<p></td><td><code>?sort=scan.submit_time,DESC,scan.status</code></td></tr><tr><td><code>page-token</code></td><td><p>The page token, used as an alternative to <code>index</code> (default: Not provided)<p></td><td><code>?page-token=NDM0NTk0NTIyOjo6X1M6OjpiYW5hbmFz</code></td></tr></tbody></table><h3>Paging using a page token</h3><p>When intending to page beyond the 10,000th result, or as an alternative to using the <code>index</code> query parameter, the <code>page-token</code> option may be used instead. After retrieving the first page, the <code>page_token</code> will be present in the <code>metadata</code> section of the response.<br />For example, with <code>size=99</code>, <code>index=0</code> to <code>index=99</code> may be used. To load the next page, use the <code>page_token</code> value used in the response e.g. <code>?page-token=NDM0NTk0NTIyO</code> </p><h2>Creating resources</h2><p>As is generally the accepted practice with REST-ful APIs, creating a resource can be performed by sending an appropriately formatted POST request. Any ID provided for a new resource in a POST request <i>body</i> will simply be ignored (and a new one generated internally and returned as part of the resource in subsequent GET requests), and POST requests to URLs following a format similar to <code>.../resource/<ID></code> are unsupported and should respond with <code>415 Method Not Allowed</code>. All requests which successfully create a resource and respond with <code>201 Created</code> will contain a <code>Location</code> header the value of which is an absolute URI for the resource (the ID of which can be determined as the last section of the path in the given URI). For example:<br /><code>Location: https://us.api.insight.rapid7.com/ias/v1/scans/12345678-1234-5678-90AB-1234567890AB</code></p><h2>Date, Time and Timezone Support</h2><p>The value of date and date-time type properties are fixed to the common ISO-8601 format. Unless otherwise specified, all date or date-time data in response bodies are expressed in UTC, and it is also expected that data provided in request bodies are also expressed in UTC.</p><h3>Schedules and Blackouts</h3><p>The <code>first_start</code> and <code>first_end</code> properties of both Blackouts and Schedules, and the <code>last_start</code> property of Blackouts may be specified with a timezone. If the timezone is not specified, it is assumed to be UTC. For example:<br /><code>2019-08-12T14:00:00.000000Z[Asia/Tokyo]</code><br />It is also possible to specify the timezone as an offset of either <code>GMT</code> or <code>UTC</code>. For example:<br /><code>2019-09-04T15:00:00.000000Z[GMT+03:00]</code></p><table><thead><tr><th>Value</th><th>Format</th><th>Notes</th></tr></thead><tbody><tr><td>Date</td><td>YYYY-MM-DD</td><td>Defaults to 12 am UTC (if used for a date &amp; time)</td></tr><tr><td>Date &amp; time only</td><td>YYYY-MM-DD''T''hh:mm:ss[.nnn]</td><td>Defaults to UTC</td></tr><tr><td>Date &amp; time in UTC</td><td>YYYY-MM-DD''T''hh:mm:ss[.nnn]Z</td><td></td></tr><tr><td>Date &amp; time with specific timezone</td><td>YYYY-MM-DD''T''hh:mm:ss[.nnn]Z[TimeZoneId]</td><td></td></tr></tbody></table><h2>Searching and Filtering</h2><p>One characteristic of a powerful API is support for complex search and filtering of resources using a flexible query language. It is entirely possible to provide basic search and filtering functionality on standard GET resource collection operations using HTTP query parameters, but this becomes restrictive when attempting to encode boolean logic. Other solutions are also possible but come with equally restrictive compromises. The most effective way to facilitate this complex search and filtering is to provide it as a top-level API with a robust Domain-Specific Language (DSL).</p><p>For simple data retrieval that supports paging and sorting functionality, use the traditional resource-specific GET collection operations; for more complex data retrieval that supports a user-crafted query DSL, use the global Search operation.</p><h2>Errors</h2><p>Any response from the API with an HTTP Status Code in the 4xx or 5xx range indicates an error. If in the 4xx range it indicates a client-side error, where in the 5xx range it indicates a server-side error. All responses indicating an error should be JSON formatted, and contain both a "status" and a "message" property indicating the cause of the error, a "r7-correlation-id" header should also always be returned in the format of a UUID, which uniquely identifies the HTTP exchange that took place and caused the error (this header is present on <i>every</i> request). On some occasions, an "error_code" property will be included in the response body, which can provide the support team further context into the cause of the error in cases where the message is not explicitly clear.</p><p>When contacting support about error responses received from the API, please attempt to include, at minimum:<ul><li>A description of the requests intent</li><li>The request URL</li><li>The request body</li><li>The error response body</li><li>The error response "r7-correlation-id" header</li></ul></p><h3>Validation Errors</h3><p>Specifically, when a response with an HTTP Status Code of 422 is returned, this indicates a validation error, almost always received in a response from a non-idempotent request (normally PUT, POST or DELETE). In this case, there should be an additional "errors" property included in the JSON response body that should describe the cause of the validation exception; this will almost always require a modification to the request body to resolve. </p>'
  version: v1
servers:
- url: https://[region].api.insight.rapid7.com/ias/v1
tags:
- name: Credential
  description: Resources and operations for managing shared credentials.
paths:
  /api/3/shared_credentials:
    get:
      tags:
      - Credential
      summary: Shared Credentials
      description: Retrieves all defined shared credential resources.
      operationId: getSharedCredentials
      schemes: []
      consumes:
      - application/json
      produces:
      - application/json;charset=UTF-8
      parameters: []
      responses:
        '200':
          description: OK
          schema:
            $ref: '#/definitions/Resources«SharedCredential»'
          examples: {}
          headers: {}
        '401':
          description: Unauthorized
          schema:
            $ref: '#/definitions/UnauthorizedError'
          examples: {}
          headers: {}
        '404':
          description: Not Found
          schema:
            $ref: '#/definitions/NotFoundError'
          examples: {}
          headers: {}
        '500':
          description: Internal Server Error
          schema:
            $ref: '#/definitions/InternalServerError'
          examples: {}
          headers: {}
        '503':
          description: Service Unavailable
          schema:
            $ref: '#/definitions/ServiceUnavailableError'
          examples: {}
          headers: {}
      security: []
    post:
      tags:
      - Credential
      summary: Shared Credentials
      description: Creates a new shared credential.
      operationId: createSharedCredential
      schemes: []
      consumes:
      - application/json
      produces:
      - application/json;charset=UTF-8
      parameters:
      - in: body
        name: credential
        description: The specification of a shared credential.
        required: false
        schema:
          $ref: '#/definitions/SharedCredential'
      responses:
        '200':
          description: OK
          schema:
            $ref: '#/definitions/CreatedReference«CredentialID,Link»'
          examples: {}
          headers: {}
        '400':
          description: Bad Request
          schema:
            $ref: '#/definitions/BadRequestError'
          examples: {}
          headers: {}
        '401':
          description: Unauthorized
          schema:
            $ref: '#/definitions/UnauthorizedError'
          examples: {}
          headers: {}
        '500':
          description: Internal Server Error
          schema:
            $ref: '#/definitions/InternalServerError'
          examples: {}
          headers: {}
        '503':
          description: Service Unavailable
          schema:
            $ref: '#/definitions/ServiceUnavailableError'
          examples: {}
          headers: {}
      security: []
      x-code-samples:
      - lang: A CIFS credential
        source: "{\n  \"name\": \"CIFS Administrator\",\n  \"description\": \"This is a cifs credential for an administrator\",\n  \"account\": {\n    \"service\": \"cifs\",\n    \"username\": \"joe_smith@acme.com\",\n    \"password\": \"******\",\n    \"domain\": \"acme\"\n  },\n  \"siteAssignment\": \"all-sites\"\n}"
      - lang: A Microsoft SQL Server credential
        source: "{\n  \"name\": \"MS SQL Administrator\",\n  \"description\": \"This is an administrator credential for a Microsoft SQL Server database. Configured to use windows authentication. Credential is not assigned to any sites by default.\",\n  \"account\": {\n    \"service\": \"ms-sql\",\n    \"database\": \"usersdb\",\n    \"useWindowsAuthentication\": true,\n    \"domain\": \"acme\",\n    \"username\": \"admin\",\n    \"password\": \"******\"\n  },\n  \"siteAssignment\": \"specific-sites\",\n  \"hostRestriction\": \"machine1.acme.com\"\n}\n"
      - lang: An Oracle database credential
        source: "{\n  \"name\": \"Oracle DB Administrator\",\n  \"description\": \"This is an administrator credential for an Oracle database. Credential is assigned to a single site.\",\n  \"account\": {\n    \"service\": \"oracle\",\n    \"sid\": \"usersdb\",\n    \"username\": \"admin\",\n    \"password\": \"******\",\n    \"enumerateSids\": true,\n    \"oracleListenerPassword\": \"******\"\n  },\n  \"siteAssignment\": \"specific-sites\",\n  \"sites\": [1],\n  \"hostRestriction\": \"192.168.1.1\"\n}\n"
      - lang: An SNMPv3 credential
        source: "{\n  \"name\": \"SNMP v3 Administator\",\n  \"account\": {\n    \"service\": \"snmpv3\",\n    \"authenticationType\": \"md5\",\n    \"username\": \"admin\",\n    \"password\": \"******\",\n    \"privacyType\": \"aes-256\",\n    \"privacyPassword\": \"******\"\n  },\n  \"siteAssignment\": \"all-sites\"\n}\n"
      - lang: An SSH credential
        source: "{\n  \"name\": \"SSH Administrator\",\n  \"description\": \"This is an SSH credential for an administrator. Credential is assigned to all sites.\",\n  \"account\": {\n    \"service\": \"ssh\",\n    \"username\": \"admin\",\n    \"password\": \"******\"\n  },\n  \"siteAssignment\": \"all-sites\"\n}\n"
      - lang: An SSH credential using sudo+su permission elevation
        source: "{\n  \"name\": \"SSH User (permission elevation with sudo+su)\",\n  \"description\": \"This is an SSH credential for an non-administrative user. Credential is configured to perform permission elevation using sudo+su for additional access.\",\n  \"account\": {\n    \"service\": \"ssh\",\n    \"username\": \"jsmith\",\n    \"password\": \"******\",\n    \"permissionElevation\": \"sudosu\",\n    \"permissionElevationUsername\": \"root\",\n    \"permissionElevationPassword\": \"******\"\n  },\n  \"siteAssignment\": \"all-sites\"\n}\n"
      - lang: An SSH public key credential
        source: "{\n  \"name\": \"SSH Public Key credential (permission elevation with sudo)\",\n  \"description\": \"This is an SSH credential for a non-administrative user using a PEM-format private key. Credential is also configured to elevate permissions using sudo.\",\n  \"account\": {\n    \"service\": \"ssh-key\",\n    \"username\": \"admin\",\n    \"privateKeyPassword\": \"*******\",\n    \"pemKey\": \"-----BEGIN RSA PRIVATE KEY-----\\nProc-Type: 4,ENCRYPTED\\nDEK-Info: AES-128-CBC,0D364155CB54D4B485BDB3B11B76BF59\\n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\\n-----END RSA PRIVATE KEY-----\",\n    \"permissionElevation\": \"sudo\",\n    \"permissionElevationUsername\": \"root\",\n    \"permissionElevationPassword\": \"*******\"\n  },\n  \"siteAssignment\": \"all-sites\"\n}\n"
    delete:
      tags:
      - Credential
      summary: Shared Credentials
      description: Deletes all shared credentials.
      operationId: deleteAllSharedCredentials
      schemes: []
      consumes:
      - application/json
      produces:
      - application/json;charset=UTF-8
      parameters: []
      responses:
        '200':
          description: OK
          schema:
            $ref: '#/definitions/Links'
          examples: {}
          headers: {}
        '401':
          description: Unauthorized
          schema:
            $ref: '#/definitions/UnauthorizedError'
          examples: {}
          headers: {}
        '404':
          description: Not Found
          schema:
            $ref: '#/definitions/NotFoundError'
          examples: {}
          headers: {}
        '500':
          description: Internal Server Error
          schema:
            $ref: '#/definitions/InternalServerError'
          examples: {}
          headers: {}
        '503':
          description: Service Unavailable
          schema:
            $ref: '#/definitions/ServiceUnavailableError'
          examples: {}
          headers: {}
      security: []
  /api/3/shared_credentials/{id}:
    get:
      tags:
      - Credential
      summary: Shared Credential
      description: Retrieves the specified shared credential.
      operationId: getSharedCredential
      schemes: []
      consumes:
      - application/json
      produces:
      - application/json;charset=UTF-8
      parameters:
      - name: id
        in: path
        description: The identifier of the credential.
        required: true
        type: integer
        format: int32
      responses:
        '200':
          description: OK
          schema:
            $ref: '#/definitions/SharedCredential'
          examples: {}
          headers: {}
        '401':
          description: Unauthorized
          schema:
            $ref: '#/definitions/UnauthorizedError'
          examples: {}
          headers: {}
        '404':
          description: Not Found
          schema:
            $ref: '#/definitions/NotFoundError'
          examples: {}
          headers: {}
        '500':
          description: Internal Server Error
          schema:
            $ref: '#/definitions/InternalServerError'
          examples: {}
          headers: {}
        '503':
          description: Service Unavailable
          schema:
            $ref: '#/definitions/ServiceUnavailableError'
          examples: {}
          headers: {}
      security: []
    put:
      tags:
      - Credential
      summary: Shared Credential
      description: Updates the specified shared credential.
      operationId: updateSharedCredential
      schemes: []
      consumes:
      - application/json
      produces:
      - application/json;charset=UTF-8
      parameters:
      - name: id
        in: path
        description: The identifier of the credential.
        required: true
        type: integer
        format: int32
      - in: body
        name: credential
        description: The specification of the shared credential to update.
        required: false
        schema:
          $ref: '#/definitions/SharedCredential'
      responses:
        '200':
          description: OK
          schema:
            $ref: '#/definitions/Links'
          examples: {}
          headers: {}
        '400':
          description: Bad Request
          schema:
            $ref: '#/definitions/BadRequestError'
          examples: {}
          headers: {}
        '401':
          description: Unauthorized
          schema:
            $ref: '#/definitions/UnauthorizedError'
          examples: {}
          headers: {}
        '404':
          description: Not Found
          schema:
            $ref: '#/definitions/NotFoundError'
          examples: {}
          headers: {}
        '500':
          description: Internal Server Error
          schema:
            $ref: '#/definitions/InternalServerError'
          examples: {}
          headers: {}
        '503':
          description: Service Unavailable
          schema:
            $ref: '#/definitions/ServiceUnavailableError'
          examples: {}
          headers: {}
      security: []
    delete:
      tags:
      - Credential
      summary: Shared Credential
      description: Deletes the specified shared scan credential.
      operationId: deleteSharedCredential
      schemes: []
      consumes:
      - application/json
      produces:
      - application/json;charset=UTF-8
      parameters:
      - name: id
        in: path
        description: The identifier of the credential.
        required: true
        type: integer
        format: int32
      responses:
        '200':
          description: OK
          schema:
            $ref: '#/definitions/Links'
          examples: {}
          headers: {}
        '401':
          description: Unauthorized
          schema:
            $ref: '#/definitions/UnauthorizedError'
          examples: {}
          headers: {}
        '404':
          description: Not Found
          schema:
            $ref: '#/definitions/NotFoundError'
          examples: {}
          headers: {}
        '500':
          description: Internal Server Error
          schema:
            $ref: '#/definitions/InternalServerError'
          examples: {}
          headers: {}
        '503':
          description: Service Unavailable
          schema:
            $ref: '#/definitions/ServiceUnavailableError'
          examples: {}
          headers: {}
      security: []
definitions:
  BadRequestError:
    type: object
    required:
    - status
    properties:
      links:
        type: array
        description: Hypermedia links to corresponding or related resources.
        items:
          $ref: '#/definitions/Link'
      message:
        type: string
        example: An error has occurred.
        description: The messages indicating the cause or reason for failure.
      status:
        type: string
        example: '400'
        description: The HTTP status code for the error (same as in the HTTP response).
        enum:
        - '400'
    description: ''
  SharedCredentialAccount:
    type: object
    properties:
      authenticationType:
        type: string
      communityName:
        type: string
      database:
        type: string
      domain:
        type: string
      enumerateSids:
        type: boolean
      notesIDPassword:
        type: string
      ntlmHash:
        type: string
      oracleListenerPassword:
        type: string
      password:
        type: string
      pemKey:
        type: string
      permissionElevation:
        type: string
      permissionElevationPassword:
        type: string
      permissionElevationUsername:
        type: string
      privacyPassword:
        type: string
      privacyType:
        type: string
      privateKeyPassword:
        type: string
      realm:
        type: string
      service:
        type: string
      sid:
        type: string
      useWindowsAuthentication:
        type: boolean
      username:
        type: string
    description: ''
  UnauthorizedError:
    type: object
    required:
    - status
    properties:
      links:
        type: array
        description: Hypermedia links to corresponding or related resources.
        items:
          $ref: '#/definitions/Link'
      message:
        type: string
        example: An error has occurred.
        description: The messages indicating the cause or reason for failure.
      status:
        type: string
        example: '401'
        description: The HTTP status code for the error (same as in the HTTP response).
        enum:
        - '401'
    description: ''
  SharedCredential:
    type: object
    required:
    - account
    - name
    - siteAssignment
    properties:
      account:
        example: ''
        description: "Specify the type of service to authenticate as well as all of the information required by that service. <div class=\"properties\"> \n<div class=\"property-info\"> \n<span class=\"property-name\">service</span> <span class=\"param-type\">string</span> \n<div class=\"param-enum\"> \n<span class=\"param-enum-value string\">\"as400\"</span> \n<span class=\"param-enum-value string\">\"cifs\"</span> \n<span class=\"param-enum-value string\">\"cifshash\"</span> \n<span class=\"param-enum-value string\">\"cvs\"</span> \n<span class=\"param-enum-value string\">\"db2\"</span> \n<span class=\"param-enum-value string\">\"ftp\"</span> \n<span class=\"param-enum-value string\">\"http\"</span> \n<span class=\"param-enum-value string\">\"ms-sql\"</span> \n<span class=\"param-enum-value string\">\"mysql\"</span> \n<span class=\"param-enum-value string\">\"notes\"</span> \n<span class=\"param-enum-value string\">\"oracle\"</span> \n<span class=\"param-enum-value string\">\"pop\"</span> \n<span class=\"param-enum-value string\">\"postgresql\"</span> \n<span class=\"param-enum-value string\">\"remote-exec\"</span> \n<span class=\"param-enum-value string\">\"snmp\"</span> \n<span class=\"param-enum-value string\">\"snmpv3\"</span> \n<span class=\"param-enum-value string\">\"ssh\"</span> \n<span class=\"param-enum-value string\">\"ssh-key\"</span> \n<span class=\"param-enum-value string\">\"sybase\"</span> \n<span class=\"param-enum-value string\">\"telnet\"</span> \n</div> \n<div class=\"redoc-markdown-block\">The type of service to authenticate with.</div>\n</div> \n</div>\n\nThe following are the names of the valid values for service: \n| Value         | Service                                         | \n| ------------- | ----------------------------------------------- | \n| `as400`       | IBM AS/400                                      | \n| `cifs`        | Microsoft Windows/Samba (SMB/CIFS)              | \n| `cifshash`    | Microsoft Windows/Samba LM/NTLM Hash (SMB/CIFS) | \n| `cvs`         | Concurrent Versioning System (CVS)              | \n| `db2`         | DB2                                             | \n| `ftp`         | File Transfer Protocol (FTP)                    | \n| `http`        | Web Site HTTP Authentication                    | \n| `ms-sql`      | Microsoft SQL Server                            | \n| `mysql`       | MySQL Server                                    | \n| `notes`       | Lotus Notes/Domino                              | \n| `oracle`      | Oracle                                          | \n| `pop`         | Post Office Protocol (POP)                      | \n| `postgresql`  | PostgreSQL                                      | \n| `remote-exec` | Remote Execution                                | \n| `snmp`        | Simple Network Management Protocol v1/v2c       | \n| `snmpv3`      | Simple Network Management Protocol v3           | \n| `ssh`         | Secure Shell (SSH)                              | \n| `ssh-key`     | Secure Shell (SSH) Public Key                   | \n| `sybase`      | Sybase SQL Server                               | \n| `telnet`      | Telnet                                          | \n\n<p>The following is a specification of supported credential properties for each type of service. These properties are to be specified within the <code>account</code> object.</p>\n\n`as400` supported properties:\n<div class=\"properties\"> \n<div class=\"property-info\"> \n<span class=\"property-name\">domain</span> <span class=\"param-type\">string</span> \n<div class=\"redoc-markdown-block\"><p>The address of the domain.</p></div>\n</div> \n<div class=\"property-info\"> \n<span class=\"property-name\">username</span> <span class=\"param-type\">string</span> <span _ngcontent-c21 class=\"param-required\">Required</span> \n<div class=\"redoc-markdown-block\"><p>The user name for the account that will be used for authenticating.</p></div>\n</div> \n<div class=\"property-info\"> \n<span class=\"property-name\">password</span> <span class=\"param-type\">string</span> <span _ngcontent-c21 class=\"param-required\">Required</span> \n<div class=\"redoc-markdown-block\"><p>The password for the account that will be used for authenticating. <strong>Note: This property is not returned in responses for security.</strong></p></div>\n</div> \n</div>\n\n`cifs` supported properties:\n<div class=\"properties\"> \n<div class=\"property-info\"> \n<span class=\"property-name\">domain</span> <span class=\"param-type\">string</span> \n<div class=\"redoc-markdown-block\"><p>The address of the domain.</p></div>\n</div> \n<div class=\"property-info\"> \n<span class=\"property-name\">username</span> <span class=\"param-type\">string</span> <span _ngcontent-c21 class=\"param-required\">Required</span> \n<div class=\"redoc-markdown-block\"><p>The user name for the account that will be used for authenticating.</p></div>\n</div> \n<div class=\"property-info\"> \n<span class=\"property-name\">password</span> <span class=\"param-type\">string</span> <span _ngcontent-c21 class=\"param-required\">Required</span> \n<div class=\"redoc-markdown-block\"><p>The password for the account that will be used for authenticating. <strong>Note: This property is not returned in responses for security.</strong></p></div>\n</div> \n</div>\n\n`cifshash` supported properties:\n<div class=\"properties\"> \n<div class=\"property-info\"> \n<span class=\"property-name\">domain</span> <span class=\"param-type\">string</span> \n<div class=\"redoc-markdown-block\"><p>The address of the domain.</p></div>\n</div> \n<div class=\"property-info\"> \n<span class=\"property-name\">username</span> <span class=\"param-type\">string</span> <span _ngcontent-c21 class=\"param-required\">Required</span> \n<div class=\"redoc-markdown-block\"><p>The user name for the account that will be used for authenticating.</p></div>\n</div> \n<div class=\"property-info\"> \n<span class=\"property-name\">ntlmHash</span> <span class=\"param-type\">string</span> <span _ngcontent-c21 class=\"param-required\">Required</span> \n<div class=\"redoc-markdown-block\"><p>The NTLM password hash. <strong>Note: This property is not returned in responses for security.</strong></p></div>\n</div> \n</div>\n\n`cvs` supported properties:\n<div class=\"properties\"> \n<div class=\"property-info\"> \n<span class=\"property-name\">domain</span> <span class=\"param-type\">string</span> \n<div class=\"redoc-markdown-block\"><p>The address of the domain.</p></div>\n</div> \n<div class=\"property-info\"> \n<span class=\"property-name\">username</span> <span class=\"param-type\">string</span> <span _ngcontent-c21 class=\"param-required\">Required</span> \n<div class=\"redoc-markdown-block\"><p>The user name for the account that will be used for authenticating.</p></div>\n</div> \n<div class=\"property-info\"> \n<span class=\"property-name\">password</span> <span class=\"param-type\">string</span> <span _ngcontent-c21 class=\"param-required\">Required</span> \n<div class=\"redoc-markdown-block\"><p>The password for the account that will be used for authenticating. <strong>Note: This property is not returned in responses for security.</strong></p></div>\n</div> \n</div>\n\n`db2` supported properties:\n<div class=\"properties\"> \n<div class=\"property-info\"> \n<span class=\"property-name\">database</span> <span class=\"param-type\">string</span> \n<div

# --- truncated at 32 KB (57 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/rapid7/refs/heads/main/openapi/rapid7-credential-api-openapi.yml