Venafi

Venafi Permission APIs API

The Permissions interface enables the management and querying of permissions within CyberArk Trust Protection Foundation™. Permissions grant principals (users and groups) privileges to objects within Trust Protection Foundation. In the Permissions interface, when a HTTP GET retrieves the permissions for a specific principal, both the effective and Implicit Permissions are returned.POST, PUT, or DELETE operations in this interface can successfully apply Effective Permissions parameters to principals in different identity providers. **What is the difference between Credentials, Permissions, and Identity?** * Credentials endpoints manage certificate and other activities. For more information, see Credentials APIs. * Identity endpoints manage CyberArk users. For more information, see Identity APIs. * Permissions endpoints grant principals (users and groups) privileges to objects within Trust Protection Foundation.

GitHub OpenAPI

Operations 19

POST /vedsdk/permissions/getprincipals Get trustees #
POST /vedsdk/permissions/getpermissions Get assigned permissions #
POST /vedsdk/permissions/geteffectivepermissions Get effective permissions #
POST /vedsdk/permissions/grantpermissions Grant permissions #
POST /vedsdk/permissions/revokepermissions Revoke permissions #
POST /vedsdk/permissions/replacepermissions Update permissions #
GET /vedsdk/permissions/refresh Refresh permissions #
GET /vedsdk/permissions/object/{guid} Gets object trustees #
GET /vedsdk/permissions/object/{guid}/local/{identity} Get assigned permissions of a local identity #
GET /vedsdk/permissions/object/{guid}/local/{identity}/effective Get effective permissions of local identity #
GET /vedsdk/permissions/object/{guid}/{prefix}/{identity}/{principal} Get assigned permissions of an identity #
DELETE /vedsdk/permissions/object/{guid}/{prefix}/{identity}/{principal} Delete permissions #
POST /vedsdk/permissions/object/{guid}/{prefix}/{identity}/{principal} Add permissions #
PUT /vedsdk/permissions/object/{guid}/{prefix}/{identity}/{principal} Update permissions #
GET /vedsdk/permissions/object/{guid}/{prefix}/{identity}/{principal}/effective Get effective permissions of an identity #
GET /vedsdk/permissions/object/{guid}/myeffective Gets the effective permissions of the session's user for the given object #
DELETE /vedsdk/permissions/object/{guid}/local/{principal} Delete permissions #
POST /vedsdk/permissions/object/{guid}/local/{principal} Add permissions #
PUT /vedsdk/permissions/object/{guid}/local/{principal} Update permissions #

Documentation

📖
Documentation
https://developer.venafi.com/tlsprotectcloud/reference/tls-protect-overview
📖
Documentation
https://docs.venafi.com/Docs/currentSDK/TopNav/Content/SDK/WebSDK/cco-sdk-GettingStarted.php

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/venafi/refs/heads/main/openapi/venafi-permission-apis-api-openapi.yml

Other Resources

🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/venafi/refs/heads/main/asyncapi/venafi-certificate-manager-saas-webhooks.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/venafi-permission-apis-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

venafi-permission-apis-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Trust Protection Foundation WebSDK Permission APIs API
  description: '# Introduction

    The Trust Protection Foundation Web SDK is a subset of REST APIs that allow you to:

    * Automate certificate management

    * Integrate with DevOps processes

    * Discover machine identities

    * Extract data to integrate with data warehouses

    * Perform bulk actions

    * Set up and administer Trust Protection Foundation

    * Onboard teams

    * Create custom, automated business logic and flows between internal systems


    All these use cases can be accomplished using the Trust Protection Foundation REST…'
  version: 26.1.1
servers:
- url: /
  description: Current Host
- url: https://REPLACEdnsnameME/
  description: System
- url: https://{dnsname}/
  description: Configurable Hostname
  variables:
    dnsname:
      default: localhost
      description: Production API Hostname
security:
- AccessToken: []
tags:


# --- truncated at 32 KB (40 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/venafi/refs/heads/main/openapi/venafi-permission-apis-api-openapi.yml