SAFE REST API

The SAFE REST API (v3) gives customers and partners programmatic access to the SAFE One platform: users, assets/technology, findings, risk scenarios, reports, audit-log export, and full lifecycle management of the platform's product integrations. Authentication is a two-step exchange - HTTP Basic with an API username/password generated in Settings > API Credentials, then POST /api/v3/auth to mint a one-hour bearer access token. The API is served from the customer's own regional tenant host on safeone.ai; the Swagger reference is published inside the authenticated application (User Profile > Help > SAFE API) and is not reachable anonymously.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/safe-rest-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.

API entry from apis.yml

apis.yml Raw ↑
name: SAFE REST API
description: 'The SAFE REST API (v3) gives customers and partners programmatic access to the SAFE One
  platform: users, assets/technology, findings, risk scenarios, reports, audit-log export, and full lifecycle
  management of the platform''s product integrations. Authentication is a two-step exchange - HTTP Basic
  with an API username/password generated in Settings > API Credentials, then POST /api/v3/auth to mint
  a one-hour bearer access token. The API is served from the customer''s own regional tenant host on safeone.ai;
  the Swagger reference is published inside the authenticated application (User Profile > Help > SAFE
  API) and is not reachable anonymously.'
humanURL: https://docs.safe.security/docs/accessing-safe-apis
baseURL: https://us.safeone.ai/api/v3
tags:
- Security
- Risk Management
- Cyber Risk Quantification
properties:
- type: Documentation
  url: https://docs.safe.security/docs/accessing-safe-apis
- type: APIReference
  url: https://docs.safe.security/docs/accessing-safe-apis
- type: Authentication
  url: authentication/safe-security-authentication.yml
- type: RateLimits
  url: rate-limits/safe-security-rate-limits.yml
- type: Conventions
  url: conventions/safe-security-conventions.yml
- type: ErrorCatalog
  url: errors/safe-security-problem-types.yml
- type: DataModel
  url: data-model/safe-security-data-model.yml
- type: MCPServer
  url: mcp/safe-security-mcp.yml
- type: Examples
  url: examples/_index.yml
- type: Lifecycle
  url: lifecycle/safe-security-lifecycle.yml