Tenable Event API

A change in the Active Directory

Operations 3

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /api/directories/{directoryId}/events/{id} Get an AD event in a directory · Get event instance by id #
Ask an LLM
“How do I look up one AD change event by id in a domain?”
“What happened in a given event in a directory?”
Tell an agent
Get event {id} in directory {directoryId}.
Show event {id} for domain {directoryId} without the forest.
GET /api/infrastructures/{infrastructureId}/directories/{directoryId}/events/{id} Get an AD event within a forest · Get event instance by id #
Ask an LLM
“Can I fetch an event using its forest and domain ids?”
“Which call returns an event scoped to an infrastructure?”
Tell an agent
Get event {id} in directory {directoryId} of forest {infrastructureId}.
Show event {id} from infrastructure {infrastructureId}, domain {directoryId}.
POST /api/events/search Search AD change events · Search events instances #
Ask an LLM
“How do I search AD change events across domains in a time window?”
“Can I filter the event trail with an expression?”
Tell an agent
Search events in profile {profileId} for directories {directoryIds} from {dateStart} to {dateEnd} matching {expression}.
Find changes in directories {directoryIds} between {dateStart} and {dateEnd} for profile {profileId}, filter {expression}, sorted {order}.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/tenable:tenable-event-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

tenable-event-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Identity Exposure Event API
  description: API to interact with Identity Exposure.
  version: production
servers:
- url: '{protocol}://customer.tenable.ad'
  variables:
    protocol:
      default: https
tags:
- name: Event
  description: A change in the Active Directory
paths:
  /api/directories/{directoryId}/events/{id}:
    get:
      summary: Get event instance by id
      description: 'Required license type: ioe, ioaPreview, ioa'
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                description: An event instance
                type: object
                additionalProperties: false
                required:
                - id
                - adObjectId
                - directoryId
                - date
                - type
                properties:
                  id:
                    format: int64
                  adObjectId:
                    type: number
                  directoryId:
                    type: number
                  type:
                    type:
                    - string
                    - 'null'
                  date:
                    type: string
                    format: date-time
        '401':
          description: Unauthorized
        '500':
          description: Internal server error
      tags:
      - Event
      x-tenablead-required-product-license-type:
      - ioe
      - ioaPreview
      - ioa
      parameters:
      - name: x-api-key
        description: The user's API key
        in: header
        schema:
          type: string
          default: put-your-api-key-here
        required: true
        deprecated: false
      - name: directoryId
        in: path
        schema:
          type: string
          pattern: ^[0-9]+$
          x-patternError: should be a numerical string
        required: true
        deprecated: false
      - name: id
        in: path
        schema:
          type: string
          pattern: ^[0-9]+$
          x-patternError: should be a numerical string
        required: true
        deprecated: false
      security:
      - ApiKey: []
      operationId: getApiDirectoriesByDirectoryIdEventsById
      x-operation-id-source: derived
  /api/infrastructures/{infrastructureId}/directories/{directoryId}/events/{id}:
    get:
      summary: Get event instance by id
      description: 'Required license type: ioe, ioaPreview, ioa'
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                description: An event instance
                type: object
                additionalProperties: false
                required:
                - id
                - adObjectId
                - directoryId
                - date
                - type
                properties:
                  id:
                    format: int64
                  adObjectId:
                    type: number
                  directoryId:
                    type: number
                  type:
                    type:
                    - string
                    - 'null'
                  date:
                    type: string
                    format: date-time
        '401':
          description: Unauthorized
        '500':
          description: Internal server error
      tags:
      - Event
      x-tenablead-required-product-license-type:
      - ioe
      - ioaPreview
      - ioa
      parameters:
      - name: x-api-key
        description: The user's API key
        in: header
        schema:
          type: string
          default: put-your-api-key-here
        required: true
        deprecated: false
      - name: infrastructureId
        in: path
        schema:
          type: string
          pattern: ^[0-9]+$
          x-patternError: should be a numerical string
        required: true
        deprecated: false
      - name: directoryId
        in: path
        schema:
          type: string
          pattern: ^[0-9]+$
          x-patternError: should be a numerical string
        required: true
        deprecated: false
      - name: id
        in: path
        schema:
          type: string
          pattern: ^[0-9]+$
          x-patternError: should be a numerical string
        required: true
        deprecated: false
      security:
      - ApiKey: []
      operationId: getApiInfrastructuresByInfrastructureIdDirectoriesByDirectoryIdEventsById
      x-operation-id-source: derived
  /api/events/search:
    post:
      summary: Search events instances
      description: 'Required license type: ioe, ioaPreview, ioa'
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                description: Validates the POST /infrastructures/{infraId}/directories/{dirId}/events response
                type: array
                items:
                  description: An event instance
                  type: object
                  additionalProperties: false
                  required:
                  - id
                  - adObjectId
                  - directoryId
                  - date
                  - type
                  properties:
                    id:
                      format: int64
                    adObjectId:
                      type: number
                    directoryId:
                      type: number
                    type:
                      type:
                      - string
                      - 'null'
                    date:
                      type: string
                      format: date-time
        '401':
          description: Unauthorized
        '500':
          description: Internal server error
      tags:
      - Event
      x-tenablead-required-product-license-type:
      - ioe
      - ioaPreview
      - ioa
      parameters:
      - name: x-api-key
        description: The user's API key
        in: header
        schema:
          type: string
          default: put-your-api-key-here
        required: true
        deprecated: false
      security:
      - ApiKey: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              additionalProperties: false
              required:
              - expression
              - profileId
              - directoryIds
              - dateStart
              - dateEnd
              properties:
                expression:
                  type: object
                order:
                  type: object
                  properties:
                    column:
                      type: string
                      enum:
                      - id
                    direction:
                      type: string
                      enum:
                      - asc
                      - desc
                profileId:
                  type: integer
                directoryIds:
                  type: array
                  minItems: 1
                  items:
                    type: integer
                dateStart:
                  type: string
                  format: date-time
                dateEnd:
                  type: string
                  format: date-time
      operationId: postApiEventsSearch
      x-operation-id-source: derived
components:
  securitySchemes:
    ApiKey:
      name: x-api-key
      description: The user's API key
      in: header
      type: apiKey
x-readme:
  explorer-enabled: true
  proxy-enabled: true