Tenable

Tenable Reason API

The reason why a AD object is marked as deviant

Documentation GitHub OpenAPI

Operations 4

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /api/reasons List deviance reasons · Retrieve all reason instances #

Ask an LLM

“What reasons can a deviance be raised for?”

“Can I list every reason across all checkers?”

Tell an agent

List all reasons.

Show every deviance reason defined.

GET /api/reasons/{id} Get a deviance reason · Get reason instance by id #

Ask an LLM

“How do I look up what one reason id means?”

“What does a specific deviance reason describe?”

Tell an agent

Get reason {id}.

Explain deviance reason {id}.

GET /api/profiles/{profileId}/checkers/{checkerId}/reasons List reasons with deviances for a checker · Retrieve all reason instances that have deviances for a specific profile and… #

Ask an LLM

“Which reasons are actually producing deviances for one indicator?”

“Can I see the active reasons behind a checker's findings in a profile?”

Tell an agent

List reasons with deviances for checker {checkerId} in profile {profileId}.

Show why checker {checkerId} is failing in profile {profileId}.

GET /api/profiles/{profileId}/infrastructures/{infrastructureId}/directories/{directoryId}/events/{eventId}/reasons List reasons with deviances for an event · Retrieve all reason instances for which we have deviances for a specific… #

Ask an LLM

“Which reasons explain the deviances a specific event created?”

“Can I see the reasons tied to one AD change event?”

Tell an agent

List reasons for event {eventId} in directory {directoryId}, forest {infrastructureId}, profile {profileId}.

Show why event {eventId} in {infrastructureId}/{directoryId} raised deviances under profile {profileId}.

Specifications

⚙

OpenAPI

https://raw.githubusercontent.com/api-evangelist/tenable/refs/heads/main/openapi/tenable-reason-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/tenable:tenable-reason-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Identity Exposure Reason API
  description: API to interact with Identity Exposure.
  version: production
servers:
- url: '{protocol}://customer.tenable.ad'
  variables:
    protocol:
      default: https
tags:
- name: Reason
  description: The reason why a AD object is marked as deviant
paths:
  /api/reasons:
    get:
      summary: Retrieve all reason instances
      description: 'Required license type: ioe'
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                description: Validates the get /reasons response
                type: array
                items:
                  description: Reason
                  type: object
                  additionalProperties: false
                  required:
                  - id
                  - codename
                  properties:
                    id:
                      type: number
                    codename:
                      type: string
                    name:
                      type:
                      - string
                      - 'null'
                      default: null
                    description:
                      type:
                      - string
                      - 'null'
                      default: null
        '401':
          description: Unauthorized
        '500':
          description: Internal server error
      tags:
      - Reason
      x-tenablead-required-product-license-type:
      - ioe
      parameters:
      - name: x-api-key
        description: The user's API key
        in: header
        schema:
          type: string
          default: put-your-api-key-here
        required: true
        deprecated: false
      security:
      - ApiKey: []
      operationId: getApiReasons
      x-operation-id-source: derived
  /api/reasons/{id}:
    get:
      summary: Get reason instance by id
      description: 'Required license type: ioe'
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                description: Reason
                type: object
                additionalProperties: false
                required:
                - id
                - codename
                properties:
                  id:
                    type: number
                  codename:
                    type: string
                  name:
                    type:
                    - string
                    - 'null'
                    default: null
                  description:
                    type:
                    - string
                    - 'null'
                    default: null
        '401':
          description: Unauthorized
        '500':
          description: Internal server error
      tags:
      - Reason
      x-tenablead-required-product-license-type:
      - ioe
      parameters:
      - name: x-api-key
        description: The user's API key
        in: header
        schema:
          type: string
          default: put-your-api-key-here
        required: true
        deprecated: false
      - name: id
        in: path
        schema:
          type: string
          pattern: ^[0-9]+$
          x-patternError: should be a numerical string
        required: true
        deprecated: false
      security:
      - ApiKey: []
      operationId: getApiReasonsById
      x-operation-id-source: derived
  /api/profiles/{profileId}/checkers/{checkerId}/reasons:
    get:
      summary: Retrieve all reason instances that have deviances for a specific profile and…
      description: 'Required license type: ioe'
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                description: Validates GET /profiles/:profileId/checkers/:checkerId/reasons response
                type: array
                items:
                  description: Reason
                  type: object
                  additionalProperties: false
                  required:
                  - id
                  - codename
                  properties:
                    id:
                      type: number
                    codename:
                      type: string
                    name:
                      type:
                      - string
                      - 'null'
                      default: null
                    description:
                      type:
                      - string
                      - 'null'
                      default: null
        '401':
          description: Unauthorized
        '500':
          description: Internal server error
      tags:
      - Reason
      x-tenablead-required-product-license-type:
      - ioe
      parameters:
      - name: x-api-key
        description: The user's API key
        in: header
        schema:
          type: string
          default: put-your-api-key-here
        required: true
        deprecated: false
      - name: profileId
        in: path
        schema:
          type: string
          pattern: ^[0-9]+$
          x-patternError: should be a numerical string
        required: true
        deprecated: false
      - name: checkerId
        in: path
        schema:
          type: string
          pattern: ^[0-9]+$
          x-patternError: should be a numerical string
        required: true
        deprecated: false
      security:
      - ApiKey: []
      operationId: getApiProfilesByProfileIdCheckersByCheckerIdReasons
      x-operation-id-source: derived
  /api/profiles/{profileId}/infrastructures/{infrastructureId}/directories/{directoryId}/events/{eventId}/reasons:
    get:
      summary: Retrieve all reason instances for which we have deviances for a specific…
      description: 'Required license type: ioe'
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                description: Validates the GET /profiles/:profileId/infrastructures/:infrastructureId/directories/:directoryId/events/:eventId/reasons response
                type: array
                items:
                  description: Reason
                  type: object
                  additionalProperties: false
                  required:
                  - id
                  - codename
                  properties:
                    id:
                      type: number
                    codename:
                      type: string
                    name:
                      type:
                      - string
                      - 'null'
                      default: null
                    description:
                      type:
                      - string
                      - 'null'
                      default: null
        '401':
          description: Unauthorized
        '500':
          description: Internal server error
      tags:
      - Reason
      x-tenablead-required-product-license-type:
      - ioe
      parameters:
      - name: x-api-key
        description: The user's API key
        in: header
        schema:
          type: string
          default: put-your-api-key-here
        required: true
        deprecated: false
      - name: profileId
        in: path
        schema:
          type: string
          pattern: ^[0-9]+$
          x-patternError: should be a numerical string
        required: true
        deprecated: false
      - name: infrastructureId
        in: path
        schema:
          type: string
          pattern: ^[0-9]+$
          x-patternError: should be a numerical string
        required: true
        deprecated: false
      - name: directoryId
        in: path
        schema:
          type: string
          pattern: ^[0-9]+$
          x-patternError: should be a numerical string
        required: true
        deprecated: false
      - name: eventId
        in: path
        schema:
          type: string
          pattern: ^[0-9]+$
          x-patternError: should be a numerical string
        required: true
        deprecated: false
      security:
      - ApiKey: []
      operationId: getApiProfilesByProfileIdInfrastructuresByInfrastructureIdDirectoriesByDirectoryIdEventsByEventIdReasons
      x-operation-id-source: derived
components:
  securitySchemes:
    ApiKey:
      name: x-api-key
      description: The user's API key
      in: header
      type: apiKey
x-readme:
  explorer-enabled: true
  proxy-enabled: true