Checkmarx
Checkmarx is a leading application security testing solution provider, offering static application security testing (SAST), software composition analysis (SCA), and other security tools to help organizations identify and remediate vulnerabilities in their code.
Checkmarx publishes 15 API contracts indexed on the APIs.io network, including Applications API, Authentication API, Configuration API, and 12 more. Tagged areas include Application Security, Code Analysis, DevSecOps, SAST, and Security Testing.
The Checkmarx catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.
Checkmarx’s developer surface includes changelog, pricing, getting-started guide, authentication, documentation, support, engineering blog, and 35 more developer resources.
What this lets a business do 1
Business capabilities this provider's published APIs can perform, derived from its own contracts. Browse all capabilities →
Kin Score
Markets this provider is in provisional
The Kin Score Market layer reads a provider inside its market: its position, and how deep its integrations go. Depth is only comparable within a position. Provisional and unweighted: not part of the Kin Score or agent readiness.
| Market | Position | Depth | Registered MCP server | Declares compatibility |
|---|---|---|---|---|
| Software Supply Chain (SBOM, Signing, Open Source Security) | builds-on | 48.5 | 1 | - |
Registered MCP server and declares compatibility are report only — not weighted. Undeclared means we found nothing we can read, so there is no number: we never infer integrations.
Standards implemented 1
Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.
APIs 15
Individual APIs this provider publishes, each with its own machine-readable definition.
Checkmarx Applications API
Manage applications that group related projects
Checkmarx Authentication API
Obtain and manage authentication tokens via OAuth 2.0
Checkmarx Configuration API
Manage project and tenant-level scan configuration
Checkmarx Engines API
Manage scan engines and engine servers
Checkmarx Groups API
Manage access control groups
Checkmarx Packages API
Query open source package information
Checkmarx Presets API
Manage scan configuration presets
Checkmarx Projects API
Manage scanning projects and their configuration
Checkmarx Queries API
Manage custom SAST queries and presets
Checkmarx Reports API
Generate and download scan reports
Checkmarx Results API
Retrieve and manage scan results and findings
Checkmarx Risk Reports API
Retrieve vulnerability and risk analysis results
Checkmarx Scans API
Trigger, monitor, and manage security scans
Checkmarx Settings API
Manage project and organization settings
Checkmarx Teams API
Manage teams and access control
Scroll for all 15
Postman Collections 15
Ready-to-run Postman collections for exercising this provider's APIs.
Scroll for all 15
Open Collections 19
Open, tool-agnostic API collections (OpenAPI-derived and Bruno).
API Collection
OPEN COLLECTIONCheckmarx One Applications API
OPEN COLLECTIONCheckmarx One Applications Authentication API
OPEN COLLECTIONCheckmarx One Applications Configuration API
OPEN COLLECTIONCheckmarx One Applications Engines API
OPEN COLLECTIONCheckmarx One Applications Groups API
OPEN COLLECTIONCheckmarx One API
OPEN COLLECTIONCheckmarx One Applications Packages API
OPEN COLLECTIONCheckmarx One Applications Presets API
OPEN COLLECTIONCheckmarx One Applications Projects API
OPEN COLLECTIONCheckmarx One Applications Queries API
OPEN COLLECTIONCheckmarx One Applications Reports API
OPEN COLLECTIONCheckmarx One Applications Results API
OPEN COLLECTIONCheckmarx One Applications Risk Reports API
OPEN COLLECTIONCheckmarx SAST API
OPEN COLLECTIONCheckmarx SCA API
OPEN COLLECTIONCheckmarx One Applications Scans API
OPEN COLLECTIONCheckmarx One Applications Settings API
OPEN COLLECTIONCheckmarx One Applications Teams API
OPEN COLLECTIONScroll for all 19
Pricing Plans 1
Published pricing tiers and plan structures.
Rate Limits 1
Documented rate limits and quota policies.
Checkmarx Rate Limits
RATE LIMITSFinOps 1
Cost, billing, and metering signals for API financial operations.
Checkmarx Finops
FINOPSSemantic Vocabularies 1
JSON-LD contexts and semantic vocabularies used across these APIs.
Checkmarx Context
JSON-LDSpectral Rules 2
Spectral governance rulesets for linting and validating these APIs.
Checkmarx — jsonschema rules
SPECTRALCheckmarx API Rules
SPECTRALOpenAPI Overlays 15
Overlays applied on top of this provider's contracts. Each card says who wrote it: a document the provider publishes, or one API Evangelist derived or generated.
Scroll for all 15
JSON Schema 40
Standalone JSON Schema definitions for this provider's data models.
ApplicationListResponse
JSON SCHEMAApplication
JSON SCHEMACreateApplicationRequest
JSON SCHEMACreateProjectRequest
JSON SCHEMACreateReportRequest
JSON SCHEMACreateScanRequest_2
JSON SCHEMACreateScanRequest
JSON SCHEMAEngineServer
JSON SCHEMAGitSettings
JSON SCHEMAGroup
JSON SCHEMALicense
JSON SCHEMAPackageDetails
JSON SCHEMAPackage
JSON SCHEMAPreset_2
JSON SCHEMAPreset
JSON SCHEMAProject_3
JSON SCHEMAProjectConfiguration
JSON SCHEMAProjectListResponse
JSON SCHEMAProject
JSON SCHEMAProjectSettings
JSON SCHEMAQuery
JSON SCHEMAReportStatus
JSON SCHEMAResultListResponse
JSON SCHEMAResult
JSON SCHEMAResultsSummary
JSON SCHEMARiskReport
JSON SCHEMAScan_2
JSON SCHEMAScan_3
JSON SCHEMAScanListResponse
JSON SCHEMACheckmarx Scan Result
JSON SCHEMAScanResultsStatistics
JSON SCHEMAScan
JSON SCHEMATeam
JSON SCHEMATokenResponse_2
JSON SCHEMATokenResponse_3
JSON SCHEMATokenResponse
JSON SCHEMAUpdateApplicationRequest
JSON SCHEMAUpdateProjectRequest
JSON SCHEMAUpdateResultRequest
JSON SCHEMACheckmarx Vulnerability
JSON SCHEMAScroll for all 40
Security Posture 3
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Agentic Access 1
Recommended x-agentic-access execution contracts for AI agents.
Resources
Get Started 2
Portal, sign-up, and the first successful call
Documentation 3
Reference material describing how the API behaves
Agent Surfaces 5
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 8
Pagination, idempotency, versioning, errors, and events
Scroll for all 8
Build 2
SDKs, sample code, and the tooling you integrate with
Access & Security 4
Authentication, authorization, and security posture
Operate 4
Status, limits, changes, and where to get help
Commercial 5
Pricing, plans, and the legal terms of use
Company 4
The organization behind the API
Other 5
Properties that don't map to a standard resource type
Source (apis.yml)
Work with this as data
Every provider here is available over the APIs.io API and to AI agents over MCP.