Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/tenable-attack-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
OpenAPI Specification
openapi: 3.2.0
info:
version: 1.0.0
title: Downloads About Attack API
description: 'The Downloads API enables customers to access and download installation and update files for available Tenable products. You can use the API endpoints to list product pages, list downloads available for a specific product, and to download a file. The endpoints can also be used to determine and download the latest version of a file to facilitate the automation of an installation.
**Note:** The Tenable Downloads API uses a different server URL than the Tenable Vulnerability Management API:
`https://www.tenable.com/downloads/api/v2/pages`.
### Authentication
Like the Downloads website, certain files require authentication to download. When files have a `"requires_auth": true` attribute on the product list page, the Downloads API uses bearer token authentication and requires a valid token in the Authorization header to download the file:
```
Authorization: Bearer AbCdEf123456
```
To access or reset your authentication token, navigate to the [Authentication Token](https://www.tenable.com/downloads/api-docs) page.
Examples of product downloads that **do not** require authentication include Nessus and Nessus Agents.'
servers:
- url: https://www.tenable.com/downloads/api/v2
security:
- Bearer: []
tags:
- name: Attack
description: Attacks as detected by Tenable.ad
paths:
/api/profiles/{profileId}/attacks:
get:
summary: Get all attacks
description: 'Required license type: ioa, ioaPreview'
responses:
'200':
description: ''
content:
application/json:
schema:
description: Validates attack search response payload
type: array
items:
description: Attack instance
type: object
additionalProperties: false
required:
- id
- directoryId
- attackTypeId
- dc
- date
- vector
- source
- destination
- isClosed
properties:
id:
type: number
description: Unique numeric identifier of the attack
directoryId:
type: number
description: Identifier of the directory the attacked Domain Controller belongs to
attackTypeId:
type: number
description: Identifier of the attack-type that has identified the attack
dc:
type: string
description: Fully qualified domain name of the attacked Domain Controller
date:
type: string
format: date-time
description: Date on which the attack has been identified
vector:
type: object
additionalProperties: false
properties:
template:
type: string
description: Localized description template for the attack vector
attributes:
type: array
items:
type: object
additionalProperties: false
required:
- name
- value
- valueType
properties:
name:
type: string
description: Name of the attack vector attribute
value:
type: string
description: JSON-stringified value of the attack vector attribute
valueType:
type: string
description: Type of the attack vector attribute
description: Attack vector data
source:
type: object
additionalProperties: false
properties:
ip:
type:
- string
- 'null'
description: Endpoint IP, if available
type:
enum:
- computer
- dc
- server
- user
- null
description: Endpoint object type, if available
hostname:
type:
- string
- 'null'
description: Endpoint hostname, if available
description: Information on the source of the attack
destination:
type: object
additionalProperties: false
properties:
ip:
type:
- string
- 'null'
description: Endpoint IP, if available
type:
enum:
- computer
- dc
- server
- user
- null
description: Endpoint object type, if available
hostname:
type:
- string
- 'null'
description: Endpoint hostname, if available
description: Information on the destination of the attack
isClosed:
type: boolean
description: Whether the customer has closed the attack
'401':
description: Unauthorized
'500':
description: Internal server error
tags:
- Attack
x-tenablead-required-product-license-type:
- ioa
- ioaPreview
parameters:
- name: x-api-key
description: The user's API key
in: header
schema:
type: string
default: put-your-api-key-here
required: true
deprecated: false
- name: profileId
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: attackTypeIds
in: query
schema:
type: array
items:
type: string
required: false
deprecated: false
- name: dateEnd
in: query
schema:
type: string
format: date-time
required: false
deprecated: false
- name: dateStart
in: query
schema:
type: string
format: date-time
required: false
deprecated: false
- name: includeClosed
in: query
schema:
type: string
enum:
- 'true'
- 'false'
required: false
deprecated: false
- name: limit
in: query
schema:
type: string
pattern: ^[0-9]+$
required: false
deprecated: false
- name: order
in: query
schema:
type: string
enum:
- desc
- asc
required: false
deprecated: false
- name: resourceType
in: query
schema:
type: string
enum:
- infrastructure
- directory
- hostname
- ip
required: true
deprecated: false
- name: resourceValue
in: query
schema:
type: string
required: true
deprecated: false
- name: search
in: query
schema:
type: string
required: false
deprecated: false
security:
- ApiKey: []
/api/profiles/{profileId}/attacks/export:
get:
summary: Get all attacks in CSV rows format
description: 'Required license type: ioa, ioaPreview'
responses:
'200':
description: ''
content:
application/json:
schema:
description: Validates attack search response payload
type: array
items:
description: Attack instance
type: object
additionalProperties: false
required:
- id
- directoryId
- attackTypeId
- dc
- date
- vector
- source
- destination
- isClosed
properties:
id:
type: number
description: Unique numeric identifier of the attack
directoryId:
type: number
description: Identifier of the directory the attacked Domain Controller belongs to
attackTypeId:
type: number
description: Identifier of the attack-type that has identified the attack
dc:
type: string
description: Fully qualified domain name of the attacked Domain Controller
date:
type: string
format: date-time
description: Date on which the attack has been identified
vector:
type: object
additionalProperties: false
properties:
template:
type: string
description: Localized description template for the attack vector
attributes:
type: array
items:
type: object
additionalProperties: false
required:
- name
- value
- valueType
properties:
name:
type: string
description: Name of the attack vector attribute
value:
type: string
description: JSON-stringified value of the attack vector attribute
valueType:
type: string
description: Type of the attack vector attribute
description: Attack vector data
source:
type: object
additionalProperties: false
properties:
ip:
type:
- string
- 'null'
description: Endpoint IP, if available
type:
enum:
- computer
- dc
- server
- user
- null
description: Endpoint object type, if available
hostname:
type:
- string
- 'null'
description: Endpoint hostname, if available
description: Information on the source of the attack
destination:
type: object
additionalProperties: false
properties:
ip:
type:
- string
- 'null'
description: Endpoint IP, if available
type:
enum:
- computer
- dc
- server
- user
- null
description: Endpoint object type, if available
hostname:
type:
- string
- 'null'
description: Endpoint hostname, if available
description: Information on the destination of the attack
isClosed:
type: boolean
description: Whether the customer has closed the attack
'401':
description: Unauthorized
'500':
description: Internal server error
tags:
- Attack
x-tenablead-required-product-license-type:
- ioa
- ioaPreview
parameters:
- name: x-api-key
description: The user's API key
in: header
schema:
type: string
default: put-your-api-key-here
required: true
deprecated: false
- name: profileId
in: path
schema:
type: string
pattern: ^[0-9]+$
x-patternError: should be a numerical string
required: true
deprecated: false
- name: attackTypeIds
in: query
schema:
type: array
items:
type: string
required: false
deprecated: false
- name: dateEnd
in: query
schema:
type: string
format: date-time
required: false
deprecated: false
- name: dateStart
in: query
schema:
type: string
format: date-time
required: false
deprecated: false
- name: includeClosed
in: query
schema:
type: string
enum:
- 'true'
- 'false'
required: false
deprecated: false
- name: limit
in: query
schema:
type: string
pattern: ^[0-9]+$
required: false
deprecated: false
- name: order
in: query
schema:
type: string
enum:
- desc
- asc
required: false
deprecated: false
- name: resourceType
in: query
schema:
type: string
enum:
- infrastructure
- directory
- hostname
- ip
required: true
deprecated: false
- name: resourceValue
in: query
schema:
type: string
required: true
deprecated: false
- name: search
in: query
schema:
type: string
required: false
deprecated: false
security:
- ApiKey: []
components:
securitySchemes:
Bearer:
type: apiKey
in: header
name: Authorization
description: 'Example: Bearer {{token}}'
x-readme:
proxy-enabled: false
explorer-enabled: true
samples-enabled: true
samples-languages:
- python
- curl
- node
- powershell
- ruby
- javascript
- objectivec
- java
- php
- csharp
- go
- swift
- kotlin