Tenable

Tenable Configurations API

With the Configurations API, you can create and maintain reusable scan settings. These endpoints allow you to perform standard CRUD operations on configuration objects to standardize scanning across your environment. For more information, see [Scan Templates](https://docs.tenable.com/web-app-scanning/Content/WAS/Scans/WASScanSettings.htm) in the _Tenable Web App Scanning User Guide_.

GitHub OpenAPI
Business capability
Vulnerability Management BC-620.40

Operations 9

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /was/v2/configs Create a web app scan configuration · Create scan configuration #
Ask an LLM
“How do I set up a new web application scan configuration?”
“Can I schedule a web app scan and choose its scanner when creating the config?”
Tell an agent
Create web app scan config {name} targeting {targets} from template {template_id}, owned by {owner_id}, with settings {settings}.
Create WAS config {name} for {targets} using template {template_id}, owner {owner_id}, settings {settings} and schedule {schedule}.
GET /api/v3/export/configs/remediation/{vuln_id} Get a remediation scan config for a web vuln · Get remediation scan configuration #
Ask an LLM
“How do I get a ready-made scan configuration to retest a web app vulnerability?”
“Does fetching the remediation config actually create the scan configuration?”
Tell an agent
Get the remediation scan configuration for web vulnerability {vuln_id}.
Build the retest config body for vuln {vuln_id}.
GET /was/v2/configs/{config_id} Get a web app scan configuration · Get scan configuration details #
Ask an LLM
“What targets and settings are defined in a particular WAS scan config?”
“Where can I view the full definition of one web app scan configuration?”
Tell an agent
Get web app scan configuration {config_id}.
Show the settings of WAS config {config_id}.
PUT /was/v2/configs/{config_id} Create or replace a web app scan configuration · Upsert scan configuration #
Ask an LLM
“Can I update a web app scan configuration, or create it if the ID doesn't exist yet?”
“How do I change the targets on an existing WAS scan configuration?”
Tell an agent
Upsert WAS config {config_id} named {name} targeting {targets} with template {template_id}, owner {owner_id} and settings {settings}.
Replace web app config {config_id} as {name} on {targets}, template {template_id}, owner {owner_id}, settings {settings}, scanner {scanner_id}.
PATCH /was/v2/configs/{config_id} Move a web app scan configuration to a folder · Move scan configuration #
Ask an LLM
“Can I move a web app scan configuration into a different folder?”
“How do I organise WAS scan configs by folder name?”
Tell an agent
Move WAS config {config_id} to folder {folder_name}.
File web app scan configuration {config_id} under {folder_name}.
DELETE /was/v2/configs/{config_id} Delete a web app scan configuration · Delete scan configuration #
Ask an LLM
“How do I delete a WAS scan configuration along with its scan history?”
“Can I delete a web app scan configuration while a scan from it is running?”
Tell an agent destructive · confirm first
Delete web app scan configuration {config_id}.
Remove WAS config {config_id} and all its history and findings.
GET /was/v2/configs/{config_id}/status/{tracking_id} Check a web app scan config's processing status · Get scan configuration processing status #
Ask an LLM
“Has my WAS scan configuration finished being created or updated?”
“What do I poll to track an asynchronous scan configuration change?”
Tell an agent
Check processing status {tracking_id} for WAS config {config_id}.
Tell me whether the change {tracking_id} to web app config {config_id} has been applied.
GET /api/v3/export/configs/{config_id} Export a web app scan config for CI/CD · Export scan configuration for CI/CD #
Ask an LLM
“How do I run a web app scan inside my CI/CD pipeline with the WAS Docker image?”
“Can I download a scan configuration in HOCON format?”
Tell an agent
Export WAS config {config_id} as HOCON for CI/CD.
Download the pipeline config file for web app scan configuration {config_id}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/tenable/refs/heads/main/openapi/tenable-configurations-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/tenable:tenable-configurations-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

tenable-configurations-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  version: 1.0.0
  title: Web Application Scanning v2 Configurations API
  license:
    name: Web App Scanning
  description: The Tenable Web App Scanning v2 API serves as a gateway for you to interact with the Tenable Web App Scanning application and enables users to automate the security management of web applications.
servers:
- url: https://cloud.tenable.com
security:
- cloud: []
tags:


# --- truncated at 32 KB (114 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/tenable/refs/heads/main/openapi/tenable-configurations-api-openapi.yml