The Tenable Exposure View API enables users to search Tenable Exposure view for their organization's cards or retrieve the details for a specified card. For more information about Exposure View, see [Exposure View](https://docs.tenable.com/exposure-management/Content/exposure-management/exposure-view/exposure-view.htm) in the _Tenable Exposure Management User Guide_.
openapi: 3.0.0
info:
version: 1.0.0
title: Downloads About Exposure View API
description: 'The Downloads API enables customers to access and download installation and update files for available Tenable products. You can use the API endpoints to list product pages, list downloads available for a specific product, and to download a file. The endpoints can also be used to determine and download the latest version of a file to facilitate the automation of an installation.
**Note:** The Tenable Downloads API uses a different server URL than the Tenable Vulnerability Management API:
`https://www.tenable.com/downloads/api/v2/pages`.
### Authentication
Like the Downloads website, certain files require authentication to download. When files have a `"requires_auth": true` attribute on the product list page, the Downloads API uses bearer token authentication and requires a valid token in the Authorization header to download the file:
```
Authorization: Bearer AbCdEf123456
```
To access or reset your authentication token, navigate to the [Authentication Token](https://www.tenable.com/downloads/api-docs) page.
Examples of product downloads that **do not** require authentication include Nessus and Nessus Agents.'
servers:
- url: https://www.tenable.com/downloads/api/v2
security:
- Bearer: []
tags:
- name: Exposure View
description: The Tenable Exposure View API enables users to search Tenable Exposure view for their organization's cards or retrieve the details for a specified card. For more information about Exposure View, see [Exposure View](https://docs.tenable.com/exposure-management/Content/exposure-management/exposure-view/exposure-view.htm) in the _Tenable Exposure Management User Guide_.
x-displayName: Exposure View
paths:
/api/v1/t1/exposure-view/cards:
get:
summary: Search cards
description: "Returns a list of exposure view cards based on your search criteria. \n\n**Caution:** This endpoint is available for use but is currently in beta. The response structure is subject to change as we continue to enhance the data model. <div class=\"perms-callout\">Requires the Basic [16] user role or the `TONE_UI.TONE_EXPOSURE_CARD.READ`, `LUMIN_EXPOSURE_VIEW.EXPOSURE_CARD.READ`, and `AD.TOGGLE_AD.USE` custom role privileges. See [Roles](doc:roles).</div>"
operationId: exposure-view-cards-search
tags:
- Exposure View
parameters:
- name: is_global_card
description: "Indicates whether or not to return Tenable-provided global cards or user-created custom cards. \n\nIf `true`, only Tenable-provided global cards are returned. If `false`, only user-created custom cards are returned. If this parameter is omitted, Tenable Exposure Management returns all cards."
explode: true
in: query
required: false
schema:
type: boolean
style: form
- name: text_query
description: Filters the results by card name.
explode: true
in: query
required: false
schema:
type: string
style: form
- name: sorting_order
description: The order to sort the results by, either ascending (`asc`) or descending (`desc`).
explode: true
in: query
required: false
schema:
default: asc
enum:
- asc
- desc
type: string
style: form
- name: limit
description: The number of card records to retrieve. The maximum value is `25`. If this parameter is omitted, Tenable Exposure Management uses the default value of `25`.
explode: true
in: query
required: false
schema:
default: 25
maximum: 25
minimum: 1
type: integer
style: form
- description: The starting record to retrieve. If this parameter is omitted, Tenable Exposure Management uses the default value of `0`.
explode: true
in: query
name: offset
required: false
schema:
default: 0
minimum: 0
type: integer
style: form
responses:
'200':
description: Returned if the list of exposure view cards was retrieved successfully.
content:
application/json:
schema:
$ref: '#/components/schemas/Exposure_View_Response-Search-Cards'
examples:
response:
value:
data:
- id: '12345'
name: Example Card
card_type: GLOBAL
is_global_card: true
ces_score:
score: 85
grade: A
sla_percentage: 95
ces_trend:
- date: '2023-10-01T00:00:00Z'
ces_score: 80
tag_count: 5
exposure_class:
- ALL
- IDENTITY
created_at: '2023-10-01T12:00:00Z'
updated_at: '2023-10-02T12:00:00Z'
last_data_update_date: '2023-10-02T12:00:00Z'
sources:
- AWS
- AZURE
- id: 2ea46426-7ca3-4fe6-85c3-c16eb2ccd94b
name: supercustom
card_type: CUSTOM
is_global_card: false
tag_count: 0
created_at: '2025-05-02T20:25:05.247Z'
updated_at: '2025-06-10T15:35:17.499Z'
ces_score:
score: 0
grade: A
sla_percentage: 16.3728
ces_trend:
- date: '2025-05-28T00:00:00.000Z'
ces_score: 154
- date: '2025-05-29T00:00:00.000Z'
ces_score: 154
- date: '2025-05-30T00:00:00.000Z'
ces_score: 154
- date: '2025-05-31T00:00:00.000Z'
ces_score: 154
- date: '2025-06-01T00:00:00.000Z'
ces_score: 154
- date: '2025-06-02T00:00:00.000Z'
ces_score: 481
- date: '2025-06-03T00:00:00.000Z'
ces_score: 481
- date: '2025-06-04T00:00:00.000Z'
ces_score: 481
- date: '2025-06-05T00:00:00.000Z'
ces_score: 481
- date: '2025-06-06T00:00:00.000Z'
ces_score: 481
- date: '2025-06-07T00:00:00.000Z'
ces_score: 481
- date: '2025-06-08T00:00:00.000Z'
ces_score: 481
- date: '2025-06-09T00:00:00.000Z'
ces_score: 481
- date: '2025-06-10T00:00:00.000Z'
ces_score: 0
- date: '2025-06-11T00:00:00.000Z'
ces_score: 0
- date: '2025-06-12T00:00:00.000Z'
ces_score: 0
- date: '2025-06-13T00:00:00.000Z'
ces_score: 0
- date: '2025-06-14T00:00:00.000Z'
ces_score: 0
- date: '2025-06-15T00:00:00.000Z'
ces_score: 0
- date: '2025-06-16T00:00:00.000Z'
ces_score: 0
- date: '2025-06-17T00:00:00.000Z'
ces_score: 0
- date: '2025-06-18T00:00:00.000Z'
ces_score: 0
- date: '2025-06-19T00:00:00.000Z'
ces_score: 0
- date: '2025-06-20T00:00:00.000Z'
ces_score: 0
- date: '2025-06-21T00:00:00.000Z'
ces_score: 0
- date: '2025-06-22T00:00:00.000Z'
ces_score: 0
- date: '2025-06-23T00:00:00.000Z'
ces_score: 0
- date: '2025-06-24T00:00:00.000Z'
ces_score: 0
- date: '2025-06-25T00:00:00.000Z'
ces_score: 0
- date: '2025-06-26T00:00:00.000Z'
ces_score: 0
- date: '2025-06-27T00:00:00.000Z'
ces_score: 0
- date: '2025-06-28T00:00:00.000Z'
ces_score: 0
exposure_class:
- WAS
- VM
last_data_update_date: '2025-06-28T20:32:23.493Z'
pagination:
offset: 0
limit: 10
total_record_count: 2
'400':
description: Returned if your request specified invalid parameters or if your request was improperly formatted.
content:
application/json:
schema:
$ref: '#/components/schemas/Exposure_View_ErrorResponse'
examples:
response:
value:
error: Bad Request
message: The requested limit size exceeds the maximum limit of 25
'401':
description: Returned if the API keys specified in your request are invalid.
content:
application/json:
schema:
$ref: '#/components/schemas/Exposure_View_ErrorResponse'
examples:
response:
value:
error: Unauthorized
message: Invalid credentials.
'403':
description: Returned if you do not have permission to search exposure view cards.
'429':
description: Returned if you attempt to send too many requests in a specific period of time. For more information, see [Rate Limiting](doc:rate-limiting).
content:
text/html:
examples:
response:
value: "<html>\n\n<head>\n <title>429 Too Many Requests</title>\n</head>\n\n<body bgcolor=\"white\">\n <center>\n <h1>429 Too Many Requests</h1>\n </center>\n <hr>\n <center>nginx</center>\n</body>\n\n</html>"
'500':
description: Returned if an internal error occurred.
content:
application/json:
schema:
$ref: '#/components/schemas/Exposure_View_ErrorResponse'
examples:
response:
value:
statusCode: 500
error: Internal Server Error
message: An internal server error occurred. Please wait a moment and try your request again.
security:
- Exposure_View_cloud: []
/api/v1/t1/exposure-view/cards/{card_id}:
get:
summary: Get card details
description: "Retrieves details for the specified exposure view card. By default, the response includes SLA efficiency and trend data for the past 30 days. You can modify the time frame using optional parameters. \n\n**Caution:** This endpoint is available for use but is currently in beta. The response structure is subject to change as we continue to enhance the data model. <div class=\"perms-callout\">Requires the Basic [16] user role or the `TONE_UI.TONE_EXPOSURE_CARD.READ`, `LUMIN_EXPOSURE_VIEW.EXPOSURE_CARD.READ` and `AD.TOGGLE_AD.USE` custom role privileges. See [Roles](doc:roles).</div>"
operationId: exposure-view-card-details
tags:
- Exposure View
parameters:
- name: card_id
description: The unique ID of the card to retrieve details for.
explode: false
in: path
required: true
schema:
type: string
style: simple
- name: trend_start_date
description: "The start date for trend data. Use this parameter in combination with the `trend_end_date` parameter to define the time frame for the trend data. \n\nThe date must be specified as a UTC timestamp in ISO 8601 format (e.g., `2025-06-28T00:00:00.000Z`)."
explode: true
in: query
required: false
schema:
description: Start date for trend data in ISO 8601 format, UTC timezone
format: date-time
type: string
style: form
- name: trend_end_date
description: "The end date for trend data. Use this parameter in combination with the `trend_start_date` parameter to define the time frame for the trend data. \n\nThe date must be specified as a UTC timestamp in ISO 8601 format (e.g., `2025-06-28T00:00:00.000Z`)."
explode: true
in: query
required: false
schema:
description: End date for trend data in ISO 8601 format, UTC timezone
format: date-time
type: string
style: form
- name: sla_efficiency_start_date
description: "The start date for SLA efficiency data. Use this parameter in combination with the `sla_efficiency_end_date` parameter to define the time frame for the SLA efficiency. \n\nThe date must be specified as a UTC timestamp in ISO 8601 format (e.g., `2025-06-28T00:00:00.000Z`)."
explode: true
in: query
required: false
schema:
description: Start date for SLA efficiency data in ISO 8601 format, UTC timezone
format: date-time
type: string
style: form
- name: sla_efficiency_end_date
description: "The end date for SLA efficiency data. Use this parameter in combination with the `sla_efficiency_start_date` parameter to define the time frame for the SLA efficiency. \n\nThe date must be specified as a UTC timestamp in ISO 8601 format (e.g., `2025-06-28T00:00:00.000Z`)."
explode: true
in: query
required: false
schema:
description: End date for SLA efficiency data in ISO 8601 format, UTC timezone
format: date-time
type: string
style: form
- name: sla_breakdown_filter
description: Filter SLA breakdown data by `REMEDIATED`, `NON_REMEDIATED`, or `ANY`.
explode: true
in: query
required: false
schema:
default: ANY
enum:
- ANY
- REMEDIATED
- NON_REMEDIATED
type: string
style: form
- name: include_trend_events
description: Indicates whether or not to include trend events.
explode: true
in: query
required: false
schema:
default: false
type: boolean
style: form
responses:
'200':
description: Returned if the data for the specified exposure view card was retrieved successfully.
content:
application/json:
schema:
$ref: '#/components/schemas/Exposure_View_Response-Card-Details'
examples:
response:
value:
id: 2ea46426-7ca3-4fe6-85c3-c16eb2ccd94b
name: supercustom
card_type: CUSTOM
is_global_card: false
ces_scores:
per_exposure: []
per_tag: []
total:
score: 0
grade: A
ces_trend:
- date: '2025-06-21T00:00:00.000Z'
ces_score: 0
- date: '2025-06-22T00:00:00.000Z'
ces_score: 0
- date: '2025-06-23T00:00:00.000Z'
ces_score: 0
- date: '2025-06-24T00:00:00.000Z'
ces_score: 0
- date: '2025-06-25T00:00:00.000Z'
ces_score: 0
- date: '2025-06-26T00:00:00.000Z'
ces_score: 0
- date: '2025-06-27T00:00:00.000Z'
ces_score: 0
- date: '2025-06-28T00:00:00.000Z'
ces_score: 0
created_at: '2025-05-02T20:25:05.247Z'
updated_at: '2025-06-10T15:35:17.499Z'
tag_count: 3
exposures:
- WAS
- VM
sources: []
last_data_update_date: '2025-06-28T22:32:11.640Z'
exposure_classes_details:
VM:
score_trend_metric:
ces_trend:
- date: '2025-05-29T00:00:00.000Z'
ces_score:
score: 124
grade: A
- date: '2025-05-30T00:00:00.000Z'
ces_score:
score: 124
grade: A
- date: '2025-05-31T00:00:00.000Z'
ces_score:
score: 124
grade: A
- date: '2025-06-01T00:00:00.000Z'
ces_score:
score: 124
grade: A
- date: '2025-06-02T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-03T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-04T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-05T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-06T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-07T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-08T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-09T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-10T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-11T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-12T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-13T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-14T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-15T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-16T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-17T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-18T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-19T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-20T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-21T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-22T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-23T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-24T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-25T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-26T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-27T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-28T00:00:00.000Z'
ces_score:
score: 0
grade: A
target_score: 1000
events: []
sla_efficiency:
- sla_severity_level: LOW
sla_inside_count: 0
sla_total_count: 65
sla_efficiency: 0
sla_efficiency_target: 0
- sla_severity_level: MEDIUM
sla_inside_count: 0
sla_total_count: 234
sla_efficiency: 0
sla_efficiency_target: 54
- sla_severity_level: HIGH
sla_inside_count: 0
sla_total_count: 46
sla_efficiency: 0
sla_efficiency_target: 0
- sla_severity_level: CRITICAL
sla_inside_count: 0
sla_total_count: 52
sla_efficiency: 0
sla_efficiency_target: 73
- sla_severity_level: OVERALL
sla_inside_count: 0
sla_total_count: 397
sla_efficiency: 0
sla_efficiency_target: 0
sla_breakdown:
risk_distribution:
risks_inside_sla:
number_of_risks: 0
percentage_of_total: 0
risks_outside_sla:
number_of_risks: 0
percentage_of_total: 0
risk_distribution_in_days:
inside_sla: 397
outside_sla: 0
exposure_category_breakdown:
- exposure_class: VM
contribution_percentage: 100
top_affecting_tags:
- id: 40d64a4e-715c-4adc-9731-b957c21b7dae
name: test
- id: 6742deeb-f72b-4cc9-b944-64af6ed02c95
name: gt1
- id: 5ce1f0bd-4133-4fbc-9f1c-69b1ef6d48dc
name: gt3
ALL:
score_trend_metric:
ces_trend:
- date: '2025-05-29T00:00:00.000Z'
ces_score:
score: 154
grade: A
- date: '2025-05-30T00:00:00.000Z'
ces_score:
score: 154
grade: A
- date: '2025-05-31T00:00:00.000Z'
ces_score:
score: 154
grade: A
- date: '2025-06-01T00:00:00.000Z'
ces_score:
score: 154
grade: A
- date: '2025-06-02T00:00:00.000Z'
ces_score:
score: 481
grade: C
- date: '2025-06-03T00:00:00.000Z'
ces_score:
score: 481
grade: C
- date: '2025-06-04T00:00:00.000Z'
ces_score:
score: 481
grade: C
- date: '2025-06-05T00:00:00.000Z'
ces_score:
score: 481
grade: C
- date: '2025-06-06T00:00:00.000Z'
ces_score:
score: 481
grade: C
- date: '2025-06-07T00:00:00.000Z'
ces_score:
score: 481
grade: C
- date: '2025-06-08T00:00:00.000Z'
ces_score:
score: 481
grade: C
- date: '2025-06-09T00:00:00.000Z'
ces_score:
score: 481
grade: C
- date: '2025-06-10T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-11T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-12T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-13T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-14T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-15T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-16T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-17T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-18T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-19T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-20T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-21T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-22T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-23T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-24T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-25T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-26T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-27T00:00:00.000Z'
ces_score:
score: 0
grade: A
- date: '2025-06-28T00:00:00.000Z'
ces_score:
score: 0
grade: A
target_score: 202
events: []
sla_efficiency:
- sla_severity_level: LOW
sla_inside_count: 65
sla_total_count: 65
sla_efficiency: 100
sla_efficiency_target: 0
- sla_severity_level: MEDIUM
sla_inside_count: 0
sla_total_count: 234
sla_efficiency: 0
sla_efficiency_target: 54
- sla_severity_level: HIGH
sla_inside_count: 0
sla_total_count: 46
sla_efficiency: 0
sla_efficiency_target: 0
- sla_severity_level: CRITICAL
sla_inside_count: 0
sla_total_count: 52
sla_efficiency: 0
sla_efficiency_target: 73
- sla_severity_level: OVERALL
sla_inside_count: 65
sla_total_count: 397
sla_efficiency: 16.3728
sla_efficiency_target: 0
sla_breakdown:
risk_distribution:
risks_inside_sla:
number_of_risks: 65
percentage_of_total: 16.3727959697733
risks_outside_sla:
number_of_risks: 65
percentage_of_total: 16.3727959697733
risk_distribution_in_days:
inside_sla: 332
outside_sla: 65
exposure_category_breakdown:
- exposure_class: VM
contribution_percentage: 100
top_affecting_ta
# --- truncated at 32 KB (67 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/tenable/refs/heads/main/openapi/tenable-exposure-view-api-openapi.yml