Tenable

Tenable Scans API

The Scans API from Tenable — 11 operation(s) for scans.

GitHub OpenAPI
Business capability
Vulnerability Management BC-620.40

Operations 17

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /pci-asv/scans/list List PCI ASV scans · List PCI scans #
Ask an LLM
“Where can I see all of my PCI ASV compliance scans?”
“Does listing PCI ASV scans require special access from Tenable support?”
Tell an agent
List my PCI ASV scans.
List {limit} PCI ASV scans sorted by {sort}.
POST /scans Create a vulnerability scan configuration · Create scan #
Ask an LLM
“How do I create a new network vulnerability scan from a template?”
“Is there a limit on how many active scans my account can have?”
Tell an agent
Create a new scan from template {uuid} with settings {settings}.
Set up a credentialed scan using template {uuid}, settings {settings} and credentials {credentials}.
GET /scans List vulnerability management scans · List scans #
Ask an LLM
“Which vulnerability management scans can I view in my account?”
“Can I list only the scans in a particular folder?”
Tell an agent
List all scans in folder {folder_id}.
Show scans modified since {last_modification_date}.
GET /scans/{scan_id} Get results of a vulnerability scan · Get scan details #
Ask an LLM
“How can I see the results from the latest run of a scan?”
“Can I pull results from an older run of a scan instead of the latest one?”
Tell an agent
Get the latest results for scan {scan_id}.
Show results of scan {scan_id} from historical run {history_id}.
PUT /scans/{scan_id} Update a vulnerability scan's configuration · Update scan #
Ask an LLM
“Can I change the targets or schedule of an existing network scan?”
“How do I disable a scan without deleting it?”
Tell an agent
Update scan {scan_id} with new settings {settings} using template {uuid}.
Change the plugins enabled on scan {scan_id} to {plugins}, keeping template {uuid} and settings {settings}.
DELETE /scans/{scan_id} Delete a vulnerability scan · Delete scan #
Ask an LLM
“How do I delete a network scan I no longer need?”
“Why can't I delete a scan that is running or paused?”
Tell an agent destructive · confirm first
Delete scan {scan_id}.
Remove the network scan {scan_id} from my account.
POST /was/v2/configs/{config_id}/scans Launch a web app scan from a configuration · Launch scan #
Ask an LLM
“How do I start a web application scan from a saved scan configuration?”
“Can I kick off a WAS scan on demand instead of waiting for the schedule?”
Tell an agent
Launch a web app scan using configuration {config_id}.
Run WAS scan config {config_id} now.
POST /api/v3/was/import Import a previously exported web app scan · Import scan #
Ask an LLM
“Can I import a web app scan that I exported earlier as JSON?”
“Which export formats can't be imported back into Web App Scanning?”
Tell an agent
Import the exported web app scan file {Filedata}.
Upload my JSON web app scan export so it shows up in Web App Scanning.
GET /was/v2/scans/{scan_id} Get details of a web app scan · Get scan details #
Ask an LLM
“What is the status and metadata of a specific web application scan?”
“Where do I look up details for one WAS scan run?”
Tell an agent
Get details for web app scan {scan_id}.
Show me WAS scan {scan_id}.
PATCH /was/v2/scans/{scan_id} Pause, resume or stop a web app scan · Update scan status #
Ask an LLM
“Can I pause a running web application scan and resume it later?”
“How do I stop a WAS scan that is currently running?”
Tell an agent
Set the requested action on web app scan {scan_id} to {requested_action}.
Pause WAS scan {scan_id} by requesting {requested_action}.
DELETE /was/v2/scans/{scan_id} Delete a web app scan and its findings · Delete scan #
Ask an LLM
“How do I remove a web app scan along with the vulnerabilities it found?”
“Is deleting a WAS scan immediate or does it run as a background job?”
Tell an agent destructive · confirm first
Delete web app scan {scan_id} and its vulnerabilities.
Remove WAS scan {scan_id}.
GET /was/v2/scans/{scan_id}/notes List notes on a web app scan · Get scan notes #
Ask an LLM
“Are there any notes or warnings recorded for my web app scan?”
“Can I page through the notes attached to a WAS scan?”
Tell an agent
Get the notes for web app scan {scan_id}.
Show the first {limit} notes on WAS scan {scan_id}.
PUT /was/v2/scans/{scan_id}/report Generate a web app scan report · Export scan results #
Ask an LLM
“Can I generate a report of a web app scan's results in a specific format?”
“What do I call first to produce a WAS scan report before downloading it?”
Tell an agent
Generate a results report for web app scan {scan_id}.
Start building the results report for WAS scan {scan_id}.
GET /was/v2/scans/{scan_id}/report Download a generated web app scan report · Download exported scan #
Ask an LLM
“How do I download a web app scan report once it has been generated?”
“Why do I get a 404 when downloading a WAS scan report?”
Tell an agent
Download the generated report for web app scan {scan_id}.
Fetch the finished WAS report file for scan {scan_id}.
GET /api/v3/export/{scan_id} Download debug ZIP for a web app scan · Download debug ZIP file #
Ask an LLM
“How can I get browser console logs and HTTP traffic to troubleshoot a web app scan?”
“Does the WAS debug bundle include Selenium information?”
Tell an agent
Download the debug ZIP for web app scan {scan_id}.
Get troubleshooting logs for WAS scan {scan_id}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/tenable/refs/heads/main/openapi/tenable-scans-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/tenable:tenable-scans-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

tenable-scans-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Tenable Scans API
  version: 1.0.0
  description: 'Operations tagged Scans across 3 of this provider''s published API definitions: tenable-pci-asv-openapi.json, tenable-vulnerability-management-openapi.json, tenable-web-app-scanning-openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: https://cloud.tenable.com
tags:


# --- truncated at 32 KB (293 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/tenable/refs/heads/main/openapi/tenable-scans-api-openapi.yml