Tenable AD object API
Representation of an Active Directory Object
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/tenable-ad-object-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Identity Exposure AD object API
description: API to interact with Identity Exposure.
version: production
servers:
- url: '{protocol}://customer.tenable.ad'
variables:
protocol:
default: https
tags:
- name: AD object
description: Representation of an Active Directory Object
paths:
/api/ad-objects:
get:
summary: Return the last state of every ad-object at the provided timestampBy default…
description: 'Required license type: ioe, ioaPreview, ioa'
responses:
'200':
description: ''
content:
application/json:
schema:
description: Validates GET /ad-objects response payload
type: object
additionalProperties: false
properties:
_embedded:
type: object
properties:
ad-object:
type: array
items:
additionalProperties: false
required:
- id
- directoryId
- objectId
- type
- objectAttributes
properties:
id:
type: number
directoryId:
type: number
objectId:
type: string
type:
type: string
enum:
- LDAP
- SYSVOL
objectAttributes:
type: array
items:
type: object
additionalProperties: false
required:
- name
- value
- valueType
properties:
name:
type: string
value:
type: string
valueType:
type: string
enum:
- boolean
- string
- integer
- date
- object
- array/boolean
- array/string
- array/integer
- array/date
- array/object
_links:
type: object
additionalProperties: true
properties:
next:
type: string
'401':
description: Unauthorized
'500':
description: Internal server error
tags:
- AD object
x-tenablead-required-product-license-type:
- ioe
- ioaPreview
- ioa
parameters:
- name: x-api-key
description: The user's API key
in: header
schema:
type: string
default: put-your-api-key-here
required: true
deprecated: false
security:
- ApiKey: []
operationId: getApiAdObjects
x-operation-id-source: derived
/api/directories/{directoryId}/ad-objects/{id}:
get:
summary: Get ad-object instance by id
description: 'Required license type: ioe, ioaPreview, ioa'
responses:
'200':
description: ''
content:
application/json:
schema:
description: AD object
type: object
additionalProperties: false
required:
- id
- directoryId
- objectId
- type
- objectAttributes
properties:
id:
type: number
directoryId:
type: number
objectId:
type: string
type:
type: string
enum:
- LDAP
- SYSVOL
objectAttributes:
type: array
minItems: 0
items:
type: object
additionalProperties: false
required:
- name
- value
- valueType
properties:
name:
type: string
value:
type: string
valueType:
type: string
enum:
- boolean
- string
- integer
- date
- object
- array/boolean
- array/string
- array/integer
- array/date
- array/object
'401':
description: Unauthorized
'500':
description: Internal server error
tags:
- AD object
x-tenablead-required-product-license-type:
- ioe
- ioaPreview
- ioa
parameters:
- name: x-api-key
description: The user's API key
in: header
schema:
type: string
default: put-your-api-key-here
required: true
deprecated: false
- name: directoryId
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: id
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
security:
- ApiKey: []
operationId: getApiDirectoriesByDirectoryIdAdObjectsById
x-operation-id-source: derived
/api/infrastructures/{infrastructureId}/directories/{directoryId}/ad-objects/{id}:
get:
summary: Get ad-object instance by id
description: 'Required license type: ioe, ioaPreview, ioa'
responses:
'200':
description: ''
content:
application/json:
schema:
description: AD object
type: object
additionalProperties: false
required:
- id
- directoryId
- objectId
- type
- objectAttributes
properties:
id:
type: number
directoryId:
type: number
objectId:
type: string
type:
type: string
enum:
- LDAP
- SYSVOL
objectAttributes:
type: array
minItems: 0
items:
type: object
additionalProperties: false
required:
- name
- value
- valueType
properties:
name:
type: string
value:
type: string
valueType:
type: string
enum:
- boolean
- string
- integer
- date
- object
- array/boolean
- array/string
- array/integer
- array/date
- array/object
'401':
description: Unauthorized
'500':
description: Internal server error
tags:
- AD object
x-tenablead-required-product-license-type:
- ioe
- ioaPreview
- ioa
parameters:
- name: x-api-key
description: The user's API key
in: header
schema:
type: string
default: put-your-api-key-here
required: true
deprecated: false
- name: directoryId
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: infrastructureId
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: id
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
security:
- ApiKey: []
operationId: getApiInfrastructuresByInfrastructureIdDirectoriesByDirectoryIdAdObjectsById
x-operation-id-source: derived
/api/profiles/{profileId}/checkers/{checkerId}/ad-objects/{id}:
get:
summary: Retrieve an AD object by id that have deviances for a specific profile and…
description: 'Required license type: ioe'
responses:
'200':
description: ''
content:
application/json:
schema:
description: Validates the GET /profiles/:profileId/checkers/:checkerId/ad-objects/:adObjectId response
type: object
required:
- id
- directoryId
- objectId
- type
- objectAttributes
- reasons
additionalProperties: false
properties:
id:
type: number
directoryId:
type: number
objectId:
type: string
type:
type: string
enum:
- LDAP
- SYSVOL
objectAttributes:
type: array
minItems: 0
items:
type: object
additionalProperties: false
required:
- name
- value
- valueType
properties:
name:
type: string
value:
type: string
valueType:
type: string
enum:
- boolean
- string
- integer
- date
- object
- array/boolean
- array/string
- array/integer
- array/date
- array/object
reasons:
type: array
items:
type: number
'401':
description: Unauthorized
'500':
description: Internal server error
tags:
- AD object
x-tenablead-required-product-license-type:
- ioe
parameters:
- name: x-api-key
description: The user's API key
in: header
schema:
type: string
default: put-your-api-key-here
required: true
deprecated: false
- name: profileId
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: checkerId
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: id
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: showIgnored
in: query
schema:
type: string
pattern: ^(true|false)$
x-patternError: should be a boolean string
required: false
deprecated: false
security:
- ApiKey: []
operationId: getApiProfilesByProfileIdCheckersByCheckerIdAdObjectsById
x-operation-id-source: derived
/api/infrastructures/{infrastructureId}/directories/{directoryId}/events/{eventId}/ad-objects/{id}:
get:
summary: Get one ad-object by event and by id
description: 'Required license type: ioe, ioaPreview, ioa'
responses:
'200':
description: ''
content:
application/json:
schema:
description: Validates /infrastructures/:infrastructureId/directories/:directoryId/events/:eventId/ad-objects/:id response
type: object
additionalProperties: false
required:
- id
- directoryId
- objectId
- type
- objectAttributes
properties:
id:
type: number
directoryId:
type: number
objectId:
type: string
type:
type: string
enum:
- LDAP
- SYSVOL
objectAttributes:
type: array
minItems: 0
items:
type: object
additionalProperties: false
required:
- name
- value
- valueType
properties:
name:
type: string
value:
type: string
valueType:
type: string
enum:
- boolean
- string
- integer
- date
- object
- array/boolean
- array/string
- array/integer
- array/date
- array/object
'401':
description: Unauthorized
'500':
description: Internal server error
tags:
- AD object
x-tenablead-required-product-license-type:
- ioe
- ioaPreview
- ioa
parameters:
- name: x-api-key
description: The user's API key
in: header
schema:
type: string
default: put-your-api-key-here
required: true
deprecated: false
- name: directoryId
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: infrastructureId
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: id
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: eventId
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
security:
- ApiKey: []
operationId: getApiInfrastructuresByInfrastructureIdDirectoriesByDirectoryIdEventsByEventIdAdObjectsById
x-operation-id-source: derived
/api/infrastructures/{infrastructureId}/directories/{directoryId}/events/{eventId}/ad-objects/{id}/changes:
get:
summary: Get one ad-object changes between a given event and the event which precedes it
description: 'Required license type: ioe, ioaPreview, ioa'
responses:
'200':
description: ''
content:
application/json:
schema:
description: AD object changes
type: array
items:
type: object
additionalProperties: false
required:
- attributeName
- values
properties:
attributeName:
type: string
valueType:
type: string
enum:
- boolean
- string
- integer
- date
- object
- array/boolean
- array/string
- array/integer
- array/date
- array/object
values:
type: object
additionalProperties: false
required:
- before
properties:
before:
type:
- string
- 'null'
after:
type:
- string
- 'null'
current:
type:
- string
- 'null'
'401':
description: Unauthorized
'500':
description: Internal server error
tags:
- AD object
x-tenablead-required-product-license-type:
- ioe
- ioaPreview
- ioa
parameters:
- name: x-api-key
description: The user's API key
in: header
schema:
type: string
default: put-your-api-key-here
required: true
deprecated: false
- name: infrastructureId
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: directoryId
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: eventId
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: id
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: wantedValues
in: query
schema:
type: array
items:
type: string
required: false
deprecated: false
security:
- ApiKey: []
operationId: getApiInfrastructuresByInfrastructureIdDirectoriesByDirectoryIdEventsByEventIdAdObjectsByIdChanges
x-operation-id-source: derived
/api/profiles/{profileId}/checkers/{checkerId}/ad-objects/search:
post:
summary: Search all AD objects having deviances by profile by checker
description: 'Required license type: ioe'
responses:
'200':
description: ''
content:
application/json:
schema:
description: Validates the get /ad-objects response
type: array
items:
description: Deviant AD object
type: object
required:
- id
- directoryId
- objectId
- type
- objectAttributes
- reasons
additionalProperties: false
properties:
id:
type: number
directoryId:
type: number
objectId:
type: string
type:
type: string
enum:
- LDAP
- SYSVOL
objectAttributes:
type: array
minItems: 0
items:
type: object
additionalProperties: false
required:
- name
- value
- valueType
properties:
name:
type: string
value:
type: string
valueType:
type: string
enum:
- boolean
- string
- integer
- date
- object
- array/boolean
- array/string
- array/integer
- array/date
- array/object
reasons:
type: array
items:
type: number
'401':
description: Unauthorized
'500':
description: Internal server error
tags:
- AD object
x-tenablead-required-product-license-type:
- ioe
parameters:
- name: x-api-key
description: The user's API key
in: header
schema:
type: string
default: put-your-api-key-here
required: true
deprecated: false
- name: profileId
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: checkerId
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: perPage
in: query
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: false
deprecated: false
- name: page
in: query
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: false
deprecated: false
security:
- ApiKey: []
requestBody:
required: true
content:
application/json:
schema:
description: Validates GET /ad-objects/ params
type: object
additionalProperties: false
required:
- expression
- directories
- reasons
- showIgnored
properties:
expression:
type: object
directories:
type: array
items:
type: integer
reasons:
type: array
items:
type: integer
dateStart:
type: string
format: date-time
dateEnd:
type: string
format: date-time
showIgnored:
type:
- boolean
- 'null'
operationId: postApiProfilesByProfileIdCheckersByCheckerIdAdObjectsSearch
x-operation-id-source: derived
components:
securitySchemes:
ApiKey:
name: x-api-key
description: The user's API key
in: header
type: apiKey
x-readme:
explorer-enabled: true
proxy-enabled: true