Sonatype

Sonatype GitHub App Configuration API

GitHub App configuration operations

Documentation GitHub OpenAPI

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/sonatype-github-app-configuration-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.0.1
info:
  title: Sonatype Lifecycle Public REST Advanced Search GitHub App Configuration API
  version: 1.201.0-02
  description: Use the Advanced Search REST API to perform searches on Lifecycle application scan reports.
security:
- BasicAuth: []
  BearerAuth: []
tags:
- description: GitHub App configuration operations
  name: GitHub App Configuration
paths:
  /api/v2/githubApp/manifest:
    post:
      description: "Generate a GitHub App manifest for registration. Returns manifest JSON with a state token for CSRF protection. The state token is cryptographically secure, single-use, and expires after 10 minutes. Submit the manifest to GitHub's app creation flow, which will redirect back to IQ Server with the state token for validation. \n\n**Permissions Required:** Configure System Configuration and Users"
      operationId: generateManifest
      parameters:
      - description: Owner (organization/application) ID
        in: query
        name: ownerId
        required: true
        schema:
          minLength: 1
          type: string
      - description: GitHub organization name
        in: query
        name: organizationName
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Manifest generated successfully
        '400':
          description: Missing owner id or organization name
        '500':
          description: Base URL not configured or invalid request
      summary: Generate GitHub App manifest
      tags:
      - GitHub App Configuration
  /api/v2/githubApp/redirect:
    get:
      description: Handles redirect from GitHub after manifest submission. Exchanges temporary code for permanent app credentials. The user's browser is automatically redirected here by GitHub - not intended for direct use. **Permissions Required:** Configure System Configuration and Users
      operationId: handleRedirect
      parameters:
      - description: Temporary manifest conversion code from GitHub
        in: query
        name: code
        required: true
        schema:
          type: string
      - description: OAuth state token for CSRF protection
        in: query
        name: state
        schema:
          type: string
      responses:
        '303':
          description: Successfully registered GitHub App, redirecting to settings page
        '400':
          description: Invalid or expired code
        '401':
          description: Authentication required
        '403':
          description: Insufficient permissions
      summary: GitHub App registration redirect callback
      tags:
      - GitHub App Configuration
  /api/v2/githubApp/setupInstallation:
    get:
      description: Process the redirect from GitHub after OAuth authorization, validate state token, exchange OAuth code with PKCE verification, verify user ownership, configure the installation for the specified organization/application, and redirect to the configuration page
      operationId: handleInstallationSetup
      parameters:
      - description: GitHub App installation ID
        in: query
        name: installation_id
        required: true
        schema:
          format: int64
          minimum: 1
          type: integer
      - description: State token for CSRF protection
        in: query
        name: state
        required: true
        schema:
          minLength: 1
          type: string
      - description: OAuth authorization code
        in: query
        name: code
        required: true
        schema:
          minLength: 1
          type: string
      responses:
        '302':
          description: Redirect to source control configuration page
        '400':
          description: Invalid or missing parameters
        '500':
          description: Failed to configure GitHub App installation
      summary: Handle GitHub App installation setup callback with OAuth + PKCE
      tags:
      - GitHub App Configuration
components:
  securitySchemes:
    BasicAuth:
      scheme: basic
      type: http
    BearerAuth:
      bearerFormat: JWT
      scheme: bearer
      type: http

Sonatype GitHub App Configuration API

Documentation

Specifications

Schemas & Data

Other Resources