Tenable Attack type API

Attack types

Operations 1

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /api/attack-types List attack types · Get attack types #
Ask an LLM
“Which kinds of attacks can Identity Exposure detect?”
“What indicators of attack are available?”
Tell an agent
List all attack types.
Show every indicator of attack type Identity Exposure supports.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/tenable:tenable-attack-type-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

tenable-attack-type-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Identity Exposure Attack type API
  description: API to interact with Identity Exposure.
  version: production
servers:
- url: '{protocol}://customer.tenable.ad'
  variables:
    protocol:
      default: https
tags:
- name: Attack type
  description: Attack types
paths:
  /api/attack-types:
    get:
      summary: Get attack types
      description: 'Required license type: ioa, ioaPreview'
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                type: array
                items:
                  type: object
                  additionalProperties: false
                  required:
                  - id
                  - codeName
                  - name
                  - yaraRules
                  - description
                  - mitreAttackDescription
                  - criticity
                  - resources
                  - vectorTemplate
                  - vectorTemplateReplacements
                  properties:
                    id:
                      type: number
                      description: Unique numeric identifier of the attack-type
                    codeName:
                      type: string
                      description: Functional key of the attack type
                    name:
                      type: string
                      description: Localized name of the attack-type
                    yaraRules:
                      type: string
                      description: YARA rules that describe the attacks identified by the attack-type
                    description:
                      type: string
                      description: Localized description of the attack-type
                    mitreAttackDescription:
                      type: string
                      description: Description of the attack-type according to the "MITRE ATT&CK" framework
                    criticity:
                      type: string
                      description: Severity of the attacks detected by this IoA. Now superseded by the "O-CRITICITY" attack-type options
                      deprecated: true
                    resources:
                      type: array
                      items:
                        type: object
                        required:
                        - name
                        - url
                        - type
                        properties:
                          name:
                            type: string
                          url:
                            type: string
                          type:
                            type: string
                      description: Resources helping understand the attacks the attack-type looks for
                    vectorTemplate:
                      type: string
                      description: Localized description template for the attack vector
                    vectorTemplateReplacements:
                      type: array
                      items:
                        type: object
                        required:
                        - name
                        - valueType
                        properties:
                          name:
                            type: string
                            description: Name of the attack vector attribute
                          valueType:
                            type: string
                            description: Type of the attack vector attribute
                      description: Metadata about the placeholders in the attack vector template
                    eventWeight:
                      type: string
                      description: Weight of the attacks in terms of performance (heavy/normal/low)
        '401':
          description: Unauthorized
        '500':
          description: Internal server error
      tags:
      - Attack type
      x-tenablead-required-product-license-type:
      - ioa
      - ioaPreview
      parameters:
      - name: x-api-key
        description: The user's API key
        in: header
        schema:
          type: string
          default: put-your-api-key-here
        required: true
        deprecated: false
      security:
      - ApiKey: []
      operationId: getApiAttackTypes
      x-operation-id-source: derived
components:
  securitySchemes:
    ApiKey:
      name: x-api-key
      description: The user's API key
      in: header
      type: apiKey
x-readme:
  explorer-enabled: true
  proxy-enabled: true