Mend

Mend.io (formerly WhiteSource) is a unified application security and AI security platform that helps engineering and security teams find and automatically remediate vulnerabilities across open-source dependencies, proprietary code, containers, and AI models/agents. Its products span Software Composition Analysis (SCA), Static Application Security Testing (SAST), container image scanning, SBOM generation, automated dependency updates (Renovate), and AI-native security for LLM-powered applications. Mend exposes a REST-compliant AppSec Platform API (v3.0) and an SCA API (v2.0) for automating scans, projects, applications, findings, reports, and administration, secured with a short-lived per-organization JWT obtained from a user key.

Mend publishes 47 API contracts indexed on the APIs.io network, including Access Management API, Access Management - Organizations API, Administration - Groups API, and 44 more. Tagged areas include Application Security, Software Composition Analysis, SAST, Container Security, and AI Security.

The Mend catalog on APIs.io includes 1 JSON-LD context and 1 Spectral governance ruleset.

Mend’s developer surface includes pricing, authentication, changelog, CLI, documentation, API reference, getting-started guide, and 33 more developer resources.

🌐 Visit website 📡 Profile data on GitHub

63.4/100 strong ▼ -5.4 Agent 26/100 agent aware Front door AI 6/6 dominant saas Full breakdown ↓
scored 2026-10-17 · rubric v0.24.0

2 published contracts 1 MCP Servers

Application Security Software Composition Analysis SAST Container Security AI Security Dependency Management Vulnerability Management DevSecOps SBOM Open Source Security Company

What this lets a business do 2

Business capabilities this provider's published APIs can perform, derived from its own contracts. Browse all capabilities →

Cybersecurity Management

BC-620

Administration - GroupsAdministration - UsersAlerts - ProductAlerts - ProjectFindings - ProjectFindings - Scan

GET /api/v3.0/projects/{projectUuid}/dependencies/findings/security GET /api/v2.0/products/{productToken}/alerts/security PUT /api/v2.0/projects/{projectToken}/alerts/security/{alertUuid} GET /api/v2.0/orgs/{orgToken}/vulnerabilities/{vulnerabilityName}/libraries

Software Product Engineering Management

BC-4200

Library - Organization

Kin Score

Kin Score How this is scored →
scored 2026-10-17 · rubric v0.24.0

Composite quality — 63.4/100 · strong

Contract Quality 11.6 / 19

Developer Ergonomics 9.9 / 15

Access Clarity 13.8 / 15

Operational Transparency 3.6 / 10

Contract Governance 2.0 / 9

Discoverability 5.6 / 8

Regulatory Posture 4.4 / 15

Create-or-Update Ergonomics 0.0 / 10

Agent readiness — 26/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 0 / 6

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 8 / 8

Request/Response Examples 7 / 7

Rate-Limit Signaling 0 / 7

Typed Event Surface 0 / 6

Agent Skills 5 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Delegated User Identity 0 / 6

Protected Resource Metadata 0 / 5

Registration Without a Human 0 / 6

Agentic Commerce Well-Known Document 0 / 5

Regulatory Posture applies to this provider. Its tags matched the Horizontal (data, software, accessibility, platform) regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.

Create-or-Update Ergonomics applies to this provider. This API accepts writes, so it carries 10 points of the composite. It is scored from the published contracts themselves: whether a caller can create-or-update in one call, whether the write accepts a key the caller already holds, and whether the response says which branch ran. Without that, every write needs a search-and-branch in front of it, and the first time that check is skipped a duplicate record is created. Scored against the observed mean rather than raw — a provider at the catalog average is unchanged by this facet, not penalised by it.

The six quality facets above are damped to 75 points between them, because the conditional facet above carries the other 25. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 75% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from github.com/api-evangelist/mend: open an issue to ask a question, or submit a pull request to add artifacts. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

Markets this provider is in provisional

The Kin Score Market layer reads a provider inside its market: its position, and how deep its integrations go. Depth is only comparable within a position. Provisional and unweighted: not part of the Kin Score or agent readiness.

Market	Position	Depth	Registered MCP server	Declares compatibility
Software Supply Chain (SBOM, Signing, Open Source Security)	builds-on	51.7	-	-

Registered MCP server and declares compatibility are report only — not weighted. Undeclared means we found nothing we can read, so there is no number: we never infer integrations.

Standards implemented 1

Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.

DevSecOps

tagged — the provider's own APIs.json carries the standard as a tag; implementation not verified

APIs 47

Individual APIs this provider publishes, each with its own machine-readable definition.

Mend Access Management API

The Access Management API from Mend — 5 operation(s) for access management.

Mend Access Management - Organizations API

The Access Management - Organizations API from Mend — 2 operation(s) for access management - organizations.

Mend Administration - Groups API

The Administration - Groups API from Mend — 6 operation(s) for administration - groups.

Mend Administration - Labels API

The Administration - Labels API from Mend — 2 operation(s) for administration - labels.

Mend Administration - Users API

The Administration - Users API from Mend — 5 operation(s) for administration - users.

Mend AI API

The AI API from Mend — 1 operation(s) for ai.

Mend Alerts - Product API

The Alerts - Product API from Mend — 3 operation(s) for alerts - product.

Mend Alerts - Project API

The Alerts - Project API from Mend — 6 operation(s) for alerts - project.

Mend Applications API

The Applications API from Mend — 8 operation(s) for applications.

Mend Asynchronous Process Control API

The Asynchronous Process Control API from Mend — 1 operation(s) for asynchronous process control.

Mend CustomAttribute - Organization API

The CustomAttribute - Organization API from Mend — 2 operation(s) for customattribute - organization.

Mend CustomAttribute - Product API

The CustomAttribute - Product API from Mend — 1 operation(s) for customattribute - product.

Mend CustomAttribute - Project API

The CustomAttribute - Project API from Mend — 1 operation(s) for customattribute - project.

Mend Dependencies Source Files API

The Dependencies Source Files API from Mend — 8 operation(s) for dependencies source files.

Mend Domain Controller API

The domain-controller API from Mend — 1 operation(s) for domain-controller.

Mend Entities - Organization API

The Entities - Organization API from Mend — 7 operation(s) for entities - organization.

Mend Entities - Product API

The Entities - Product API from Mend — 2 operation(s) for entities - product.

Mend Entities - Project API

The Entities - Project API from Mend — 3 operation(s) for entities - project.

Mend Findings - Project API

The Findings - Project API from Mend — 26 operation(s) for findings - project.

Mend Findings - Scan API

The Findings - Scan API from Mend — 5 operation(s) for findings - scan.

Mend General Info - Licenses API

The General Info - Licenses API from Mend — 2 operation(s) for general info - licenses.

Mend General Info - Permissions API

The General Info - Permissions API from Mend — 1 operation(s) for general info - permissions.

Mend General Info - Vulnerabilities API

The General Info - Vulnerabilities API from Mend — 2 operation(s) for general info - vulnerabilities.

Mend Integrations API

The Integrations API from Mend — 1 operation(s) for integrations.

Mend Library - Organization API

The Library - Organization API from Mend — 10 operation(s) for library - organization.

Mend Library - Product API

The Library - Product API from Mend — 6 operation(s) for library - product.

Mend Library - Project API

The Library - Project API from Mend — 5 operation(s) for library - project.

Mend Library - Source Files API

The Library - Source Files API from Mend — 2 operation(s) for library - source files.

Mend Policies - Organization API

The Policies - Organization API from Mend — 4 operation(s) for policies - organization.

Mend Policies - Product API

The Policies - Product API from Mend — 4 operation(s) for policies - product.

Mend Policies - Project API

The Policies - Project API from Mend — 4 operation(s) for policies - project.

Mend Product Attribution Report Controller API

The product-attribution-report-controller API from Mend — 1 operation(s) for product-attribution-report-controller.

Mend Project Attribution Report Controller API

The project-attribution-report-controller API from Mend — 1 operation(s) for project-attribution-report-controller.

Mend Projects API

The Projects API from Mend — 11 operation(s) for projects.

Mend Red Team API

The Red Team API from Mend — 1 operation(s) for red team.

Mend Reports API

The Reports API from Mend — 43 operation(s) for reports.

Mend Scans API

The Scans API from Mend — 6 operation(s) for scans.

Mend Settings - In-House API

The Settings - In-House API from Mend — 4 operation(s) for settings - in-house.

Mend Settings - Whitelist API

The Settings - Whitelist API from Mend — 4 operation(s) for settings - whitelist.

Mend Summary - Organization API

The Summary - Organization API from Mend — 12 operation(s) for summary - organization.

Mend Update Request API

The Update Request API from Mend — 1 operation(s) for update request.

Mend User Management - Groups API

The User Management - Groups API from Mend — 5 operation(s) for user management - groups.

Mend User Management - Roles And Permissions API

The User Management - Roles And Permissions API from Mend — 3 operation(s) for user management - roles and permissions.

Mend User Management - Users API

The User Management - Users API from Mend — 9 operation(s) for user management - users.

Mend User Profile API

The User Profile API from Mend — 2 operation(s) for user profile.

Mend Vulnerable Libraries API

The Vulnerable Libraries API from Mend — 1 operation(s) for vulnerable libraries.

Mend Zero-Day Events API

The Zero-Day Events API from Mend — 2 operation(s) for zero-day events.

Scroll for all 47

Open Collections 48

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

API Collection

OPEN COLLECTION

Mend Access Management API

OPEN COLLECTION

Mend Access Management Access Management - Organizations API

OPEN COLLECTION

Mend Access Management Administration - Groups API

OPEN COLLECTION

Mend Access Management Administration - Labels API

OPEN COLLECTION

Mend Access Management Administration - Users API

OPEN COLLECTION

Mend Access Management AI API

OPEN COLLECTION

Mend Access Management Alerts - Product API

OPEN COLLECTION

Mend Access Management Alerts - Project API

OPEN COLLECTION

Mend Access Management Applications API

OPEN COLLECTION

Mend Access Management Asynchronous Process Control API

OPEN COLLECTION

Mend Access Management CustomAttribute - Organization API

OPEN COLLECTION

Mend Access Management CustomAttribute - Product API

OPEN COLLECTION

Mend Access Management CustomAttribute - Project API

OPEN COLLECTION

Mend Access Management Dependencies Source Files API

OPEN COLLECTION

Mend Access Management domain-controller API

OPEN COLLECTION

Mend Access Management Entities - Organization API

OPEN COLLECTION

Mend Access Management Entities - Product API

OPEN COLLECTION

Mend Access Management Entities - Project API

OPEN COLLECTION

Mend Access Management Findings - Project API

OPEN COLLECTION

Mend Access Management Findings - Scan API

OPEN COLLECTION

Mend Access Management General Info - Licenses API

OPEN COLLECTION

Mend Access Management General Info - Permissions API

OPEN COLLECTION

Mend Access Management General Info - Vulnerabilities API

OPEN COLLECTION

Mend Access Management Integrations API

OPEN COLLECTION

Mend Access Management Library - Organization API

OPEN COLLECTION

Mend Access Management Library - Product API

OPEN COLLECTION

Mend Access Management Library - Project API

OPEN COLLECTION

Mend Access Management Library - Source Files API

OPEN COLLECTION

Mend Access Management Policies - Organization API

OPEN COLLECTION

Mend Access Management Policies - Product API

OPEN COLLECTION

Mend Access Management Policies - Project API

OPEN COLLECTION

Mend Access Management product-attribution-report-controller API

OPEN COLLECTION

Mend Access Management project-attribution-report-controller API

OPEN COLLECTION

Mend Access Management Projects API

OPEN COLLECTION

Mend Access Management Red Team API

OPEN COLLECTION

Mend Access Management Reports API

OPEN COLLECTION

Mend Access Management Scans API

OPEN COLLECTION

Mend Access Management Settings - In-House API

OPEN COLLECTION

Mend Access Management Settings - Whitelist API

OPEN COLLECTION

Mend Access Management Summary - Organization API

OPEN COLLECTION

Mend Access Management Update Request API

OPEN COLLECTION

Mend Access Management User Management - Groups API

OPEN COLLECTION

Mend Access Management User Management - Roles And Permissions API

OPEN COLLECTION

Mend Access Management User Management - Users API

OPEN COLLECTION

Mend Access Management User Profile API

OPEN COLLECTION

Mend Access Management Vulnerable Libraries API

OPEN COLLECTION

Mend Access Management Zero-Day Events API

OPEN COLLECTION

Scroll for all 48

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

Mend MCP Server

Remote MCP server at api-docs.mend.io over HTTP requiring OAuth; 7 tools listed.

MCP SERVER

Pricing Plans 1

Published pricing tiers and plan structures.

Mend Plans Pricing

3 plans

PLANS

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Mend Context

120 classes · 225 properties

JSON-LD

Spectral Rules 1

Spectral governance rulesets for linting and validating these APIs.

Mend API Rules

17 rules · 10 errors 4 warnings 3 info

SPECTRAL

OpenAPI Overlays 2

Overlays applied on top of this provider's contracts. Each card says who wrote it: a document the provider publishes, or one API Evangelist derived or generated.

Mend Platform Overlay

2 actions · update · mend-platform-openapi-original.json

UNRECORDED

Mend Sca Overlay

1 action · update · mend-sca-openapi-original.json

UNRECORDED

JSON Schema 142

Standalone JSON Schema definitions for this provider's data models.

AttributionImgReportExportDTO

22 properties

JSON SCHEMA

AttributionReportLibrarySettingRuleDTO

1 properties

JSON SCHEMA

common.BaseApiResponseV3

3 properties

JSON SCHEMA

ContextEntityRequestDTO

1 properties

JSON SCHEMA

CopyrightReferenceRequestDTO

6 properties

JSON SCHEMA

CreateGroupRequestDTO

2 properties

JSON SCHEMA

CreateInHouseRuleRequestDTO

4 properties

JSON SCHEMA

CreateProjectByProductRequestDTO

2 properties

JSON SCHEMA

CreateProjectInOrgRequestDTOV3

3 properties

JSON SCHEMA

CreateSecurityFindingsByLibraryReportDTOV3

5 properties

JSON SCHEMA

CreateSecurityFindingsReportDTOV3

5 properties

JSON SCHEMA

CreateUserRequestDTO

2 properties

JSON SCHEMA

CreateWhiteListRuleRequestDTO

2 properties

JSON SCHEMA

CustomAttributeValueDTO

1 properties

JSON SCHEMA

DomainLabelRequestDTO

2 properties

JSON SCHEMA

dto.MendCursoredResponse-array_dto_FindingV3

3 properties

JSON SCHEMA

dto.MendResponse-dto_FindingV3

3 properties

JSON SCHEMA

dto.PatchFinding

5 properties

JSON SCHEMA

DWRResponseAsyncProcessStatusV2DTO

2 properties

JSON SCHEMA

DWRResponseBoolean

2 properties

JSON SCHEMA

DWRResponseCollectionDomainDTO

2 properties

JSON SCHEMA

DWRResponseCollectionLibraryImpactDTO

2 properties

JSON SCHEMA

DWRResponseCollectionPolicyDTO

2 properties

JSON SCHEMA

DWRResponseCollectionProjectDTO

2 properties

JSON SCHEMA

DWRResponseContextEntityDTO

2 properties

JSON SCHEMA

DWRResponseCreatedCreateProjectResponseDTO

3 properties

JSON SCHEMA

DWRResponseCreatedProductDTO

3 properties

JSON SCHEMA

DWRResponseCreatedProjectDTO

3 properties

JSON SCHEMA

DWRResponseEnrichedUserInfoDTO

2 properties

JSON SCHEMA

DWRResponseLicenseDTO

2 properties

JSON SCHEMA

DWRResponseListEnrichedUserInfoDTO

2 properties

JSON SCHEMA

DWRResponseListLightLibraryDTO

2 properties

JSON SCHEMA

DWRResponseListProjectLibraryDTO

2 properties

JSON SCHEMA

DWRResponseListRolePermissionsDTO

2 properties

JSON SCHEMA

DWRResponseListVulnerabilityProfileDTO

2 properties

JSON SCHEMA

DWRResponseListWhiteListRuleDTO

2 properties

JSON SCHEMA

DWRResponseMessageDTO

2 properties

JSON SCHEMA

DWRResponsePageableCollectionDomainEntitiesDTO

3 properties

JSON SCHEMA

DWRResponsePageableCollectionDomainEntitiesProductDTO

3 properties

JSON SCHEMA

DWRResponsePageableCollectionLegalAndComplianceAlertBaseDTO

3 properties

JSON SCHEMA

DWRResponsePageableCollectionLibraryCountByProductDTO

3 properties

JSON SCHEMA

DWRResponsePageableCollectionLibraryCountByProjectDTO

3 properties

JSON SCHEMA

DWRResponsePageableCollectionLibraryVersionDTO

3 properties

JSON SCHEMA

DWRResponsePageableCollectionLicenseDTO

3 properties

JSON SCHEMA

DWRResponsePageableCollectionProductDTO

3 properties

JSON SCHEMA

DWRResponsePageableCollectionProjectDTO

3 properties

JSON SCHEMA

DWRResponsePageableCollectionSecurityAlertDTO

3 properties

JSON SCHEMA

DWRResponsePageableCollectionSecurityAlertLibraryDTO

3 properties

JSON SCHEMA

DWRResponsePageableCollectionSourceFileInventoryDTO

3 properties

JSON SCHEMA

DWRResponsePageableCollectionUserKeyDTO

3 properties

JSON SCHEMA

DWRResponsePageableCollectionVulnerableLibrariesCountDTO

3 properties

JSON SCHEMA

DWRResponsePageableCollectionVulnrerableLibrariesByProjectCountDTO

3 properties

JSON SCHEMA

DWRResponsePageableDomainSummaryInHouseLibraryPerProductDTO

3 properties

JSON SCHEMA

DWRResponsePageableDomainSummeryInHouseLibraryPerProjectDTO

3 properties

JSON SCHEMA

DWRResponsePageableInHouseSettingsDTO

3 properties

JSON SCHEMA

DWRResponsePageableListCustomAttributeDTO

3 properties

JSON SCHEMA

DWRResponsePageableListDueDiligenceDTO

3 properties

JSON SCHEMA

DWRResponsePageableListGroupSummaryDTO

3 properties

JSON SCHEMA

DWRResponsePageableListLibraryDTO

3 properties

JSON SCHEMA

DWRResponsePageableListLightLibraryDTO

3 properties

JSON SCHEMA

DWRResponsePageableListMultipleGroupRolesPerContextDTO

3 properties

JSON SCHEMA

DWRResponsePageableListUserInfoDTO

3 properties

JSON SCHEMA

DWRResponsePageableListVulnerabilityProfileDTO

3 properties

JSON SCHEMA

DWRResponsePageableListWhiteListRuleDTO

3 properties

JSON SCHEMA

DWRResponsePageableV3CollectionApplicationDTOV3

3 properties

JSON SCHEMA

DWRResponsePageableV3CollectionProjectDTOV3

3 properties

JSON SCHEMA

DWRResponsePageableV3CollectionSourceFileInventoryDTOV3

3 properties

JSON SCHEMA

DWRResponsePageableV3ListApplicationSummaryDTOV3

3 properties

JSON SCHEMA

DWRResponsePageableV3ListGroupSummaryDTOV3

3 properties

JSON SCHEMA

DWRResponsePageableV3ListGroupWithRoleDefinitionsSummaryDTOV3

3 properties

JSON SCHEMA

DWRResponsePageableV3ListMultipleGroupRolesPerContextDTOV3

3 properties

JSON SCHEMA

DWRResponsePageableV3ListOrganizationLabelDTOV3

3 properties

JSON SCHEMA

DWRResponsePageableV3ListProjectSummaryDTOV3

3 properties

JSON SCHEMA

DWRResponsePageableV3ListProjectTraceDTOV3

3 properties

JSON SCHEMA

DWRResponsePageableV3ListProjectViolationDTOV3

3 properties

JSON SCHEMA

DWRResponsePageableV3ListScanSummaryDTOV3

3 properties

JSON SCHEMA

DWRResponsePageableV3ListScanTagDTO

3 properties

JSON SCHEMA

DWRResponsePageableV3ListUserInfoDTO

3 properties

JSON SCHEMA

DWRResponsePageableV3ListUserInfoDTOV3

3 properties

JSON SCHEMA

DWRResponsePageableV3ListZeroDayEventDTOV3

3 properties

JSON SCHEMA

DWRResponsePageableV3ListZeroDayEventFindingDTOV3

3 properties

JSON SCHEMA

DWRResponsePolicyDTO

2 properties

JSON SCHEMA

DWRResponseProductDTO

2 properties

JSON SCHEMA

DWRResponseProjectDTO

2 properties

JSON SCHEMA

DWRResponseScanSummaryReceiverUserDTO

2 properties

JSON SCHEMA

DWRResponseSessionInfo

2 properties

JSON SCHEMA

DWRResponseUserInfoResponseDTO

2 properties

JSON SCHEMA

DWRResponseUserKeyDTO

2 properties

JSON SCHEMA

DWRResponseUserPermissionListDTO

2 properties

JSON SCHEMA

DWRResponseV3AccessTokenResponseDTO

2 properties

JSON SCHEMA

DWRResponseV3Boolean

2 properties

JSON SCHEMA

DWRResponseV3CollectionSourceLibraryResponseDTO_MatchSuggestions

2 properties

JSON SCHEMA

DWRResponseV3ListIntegrationDTOV3

2 properties

JSON SCHEMA

DWRResponseV3LoginResponseDTO

2 properties

JSON SCHEMA

DWRResponseV3MessageDTO

2 properties

JSON SCHEMA

DWRResponseV3ScanDiffResponseDTOV3

2 properties

JSON SCHEMA

DWRResponseV3ScanDTOV3

2 properties

JSON SCHEMA

DWRResponseV3ScanSummaryDTOV3

2 properties

JSON SCHEMA

DWRResponseV3UserInfoResponseDTO

2 properties

JSON SCHEMA

DWRResponseVitalsDTO

2 properties

JSON SCHEMA

DWRResponseVulnerabilityFixSummaryInfoDTO

2 properties

JSON SCHEMA

DWRResponseVulnerabilityProfileDTO

2 properties

JSON SCHEMA

Initiates the update process for an individual In-House library rule

3 properties

JSON SCHEMA

Initiates the update process for an individual In-House library rule

3 properties

JSON SCHEMA

DWRResponseWhiteListRuleDTO

2 properties

JSON SCHEMA

FindingsReportExportDTOV3

8 properties

JSON SCHEMA

FindingsReportExportProjectDTOV3

7 properties

JSON SCHEMA

GenerateUserKeyRequestDTO

1 properties

JSON SCHEMA

github_com_mend_cloud-native_modules_common_model.FindingStatus

21 properties

JSON SCHEMA

github_com_mend_cloud-native_modules_scanner_model.Package

4 properties

JSON SCHEMA

github_com_mend_cloud-native_modules_scanner_model.SecretFinding

14 properties

JSON SCHEMA

GroupRoleRequestDTO

3 properties

JSON SCHEMA

GroupRoleRequestDTOV3

3 properties

JSON SCHEMA

InHouseRequestDTO

3 properties

JSON SCHEMA

InviteUserRequestDTO

1 properties

JSON SCHEMA

LabelRequestDTOV3

2 properties

JSON SCHEMA

LibraryLicenseRequestDTO

3 properties

JSON SCHEMA

LibraryMatchSuggestionsRequestDTOV3_MatchSuggestions

2 properties

JSON SCHEMA

LoginModelDTO

3 properties

JSON SCHEMA

LoginModelDTOV3

2 properties

JSON SCHEMA

model.SecurityFindingExternal

20 properties

JSON SCHEMA

MultiContextRequestDTOV3

2 properties

JSON SCHEMA

OrganizationLabelRequestDTO

2 properties

JSON SCHEMA

PolicyRequestDTO

4 properties

JSON SCHEMA

ProjectListRequestDTO

1 properties

JSON SCHEMA

ReportExportProcessDTO

18 properties

JSON SCHEMA

SbomScanResponseDTO

4 properties

JSON SCHEMA

SessionInfo

8 properties

JSON SCHEMA

SourceFileRemappingAppRequestDTOV3

6 properties

JSON SCHEMA

SourceFileRemappingOrgRequestDTOV3

5 properties

JSON SCHEMA

SourceFilesRemappingAsyncStatusDtoV3

4 properties

JSON SCHEMA

StreamingResponseBody

0 properties

JSON SCHEMA

UpdateGroupRequestDTO

2 properties

JSON SCHEMA

UpdateInHouseRuleRequestDTO

4 properties

JSON SCHEMA

UpdateInHouseRulesRequestDTO

5 properties

JSON SCHEMA

UpdatePrioritiesRequestDTO

1 properties

JSON SCHEMA

UpdateRiskRequestDTO

3 properties

JSON SCHEMA

UpdateWhiteListRuleRequestDTO

2 properties

JSON SCHEMA

UpdateWhiteListRuleDTO

3 properties

JSON SCHEMA

v3.V3BaseResponse-v3_V3TestRunTriggerResponse

2 properties

JSON SCHEMA

v3.V3ImplementationWeaknessResponse

10 properties

JSON SCHEMA

v3.V3TestRunTriggerRequest

3 properties

JSON SCHEMA

Scroll for all 142

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Mend Authentication

http · 1 scheme

SECURITY

Mend Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Mend Trust Center

trust center published

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Mend Agentic Access

293 operations · 150 acting · 3 human-in-the-loop

293 operations · 150 acting

AGENTIC

Resources

Get Started 3

Portal, sign-up, and the first successful call

DeveloperPortal

DeveloperPortal

GettingStarted

GettingStarted

Login

Documentation 2

Reference material describing how the API behaves

Documentation

Documentation

APIReference

APIReference

Agent Surfaces 4

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

MCPServer

LLMsTxt

AgentSkill

Design & Contract 8

Pagination, idempotency, versioning, errors, and events

Spectral

JSONLD

Vocabulary

Conventions

ErrorCatalog

Lifecycle

Conformance

DataModel

Scroll for all 8

Build 2

SDKs, sample code, and the tooling you integrate with

CLI

CLI

GitHubOrganization

GitHubOrganization

Access & Security 5

Authentication, authorization, and security posture

TrustCenter

DomainSecurity

Authentication

TrustCenter

Compliance

Operate 3

Status, limits, changes, and where to get help

ChangeLog

ChangeLog

Support

Support

StatusPage

StatusPage

Commercial 5

Pricing, plans, and the legal terms of use

TermsOfService

PrivacyPolicy

Pricing

Plans

Pricing

Company 3

The organization behind the API

Newsroom

Newsroom

Website

Website

Blog

Blog

Other 5

Properties that don't map to a standard resource type

AgentCard

Hosts

Vendors

CapabilityMap

Overlay

Source (apis.yml)

aid: mend
name: Mend
description: Mend.io (formerly WhiteSource) is a unified application security and AI security platform that helps engineering
  and security teams find and automatically remediate vulnerabilities across open-source dependencies, proprietary code, containers,
  and AI models/agents. Its products span Software Composition Analysis (SCA), Static Application Security Testing (SAST),
  container image scanning, SBOM generation, automated dependency updates (Renovate), and AI-native security for LLM-powered
  applications. Mend exposes a REST-compliant AppSec Platform API (v3.0) and an SCA API (v2.0) for automating scans, projects,
  applications, findings, reports, and administration, secured with a short-lived per-organization JWT obtained from a user
  key.
url: https://raw.githubusercontent.com/api-evangelist/mend/refs/heads/main/apis.yml
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: false
  label: Hosted service · you call their endpoint
  confidence: medium
  source:
  - openapi
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source:
  - authentication
  - security
  generated: '2026-09-03'
  method: derived
image: https://api-docs.mend.io/assets/mend-io-logo.06cad8388af3f063d8c0af6ef0386393959988075733a762b0899791865771ba.9c1bb791.svg
x-type: company
x-source: vc-portfolio
x-backed-by:
- lightspeed-venture-partners
x-tier: profiled
x-tier-reason: enrichment pass 2026-10-04 (modular-v1; was portfolio-lead)
specificationVersion: '0.23'
created: '2026-07-17'
modified: '2026-07-20'
tags:
- Application Security
- Software Composition Analysis
- SAST
- Container Security
- AI Security
- Dependency Management
- Vulnerability Management
- DevSecOps
- SBOM
- Open Source Security
- Company
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Spectral
  url: rules/mend-rules.yml
- type: JSONLD
  url: json-ld/mend-context.jsonld
- type: Vocabulary
  url: vocabulary/mend-vocabulary.yml
- type: AgentCard
  url: a2a/mend-a2a.yml
- type: Hosts
  url: hosts/mend-hosts.yml
- type: Vendors
  url: vendors/mend-vendors.yml
- type: TermsOfService
  url: https://www.mend.io/terms-of-service
- type: PrivacyPolicy
  url: https://www.mend.io/privacy-policy
- type: Newsroom
  url: https://www.mend.io/newsroom/
- type: Pricing
  url: https://www.mend.io/pricing/
- type: Plans
  url: plans/mend-plans-pricing.yml
- type: CapabilityMap
  url: capabilities/mend-capability-edges.yml
  name: Mend Business Capability Map
- type: Overlay
  url: overlays/mend-platform-overlay.yaml
- type: AgenticAccess
  url: agentic-access/mend-agentic-access.yml
- type: TrustCenter
  url: security/mend-trust-center.yml
- type: DomainSecurity
  url: security/mend-domain-security.yml
- type: Authentication
  url: authentication/mend-authentication.yml
- type: Conventions
  url: conventions/mend-conventions.yml
- type: ErrorCatalog
  url: errors/mend-problem-types.yml
- type: Lifecycle
  url: lifecycle/mend-lifecycle.yml
- type: ChangeLog
  url: changelog/mend-changelog.yml
- type: Conformance
  url: conformance/mend-conformance.yml
- type: DataModel
  url: data-model/mend-data-model.yml
- type: MCPServer
  url: mcp/mend-mcp.yml
- type: LLMsTxt
  url: llms/mend-llms.txt
- type: CLI
  url: cli/mend-cli.yml
- type: AgentSkill
  url: skills/_index.yml
- url: https://www.mend.io/
  type: Website
- url: https://api-docs.mend.io/
  type: DeveloperPortal
- url: https://docs.mend.io/
  type: Documentation
- url: https://api-docs.mend.io/platform/3.0
  type: APIReference
- url: https://docs.mend.io/platform/latest/getting-started-with-mend-api-3-0
  type: GettingStarted
- url: https://support.mend.io/
  type: Support
- url: https://www.mend.io/blog/
  type: Blog
- url: https://www.mend.io/pricing/
  type: Pricing
- url: https://www.mend.io/integrations/
  type: Integrations
- url: https://saas.mend.io/login
  type: Login
- url: https://github.com/mend-toolkit
  type: GitHubOrganization
- url: https://status.mend.io/
  type: StatusPage
- url: https://trust.mend.io/
  type: TrustCenter
- url: https://trust.mend.io/
  type: Compliance
apis:
- aid: mend:mend-access-management-api
  name: Mend Access Management API
  description: The Access Management API from Mend — 5 operation(s) for access management.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Identity and Access Management
  tags_raw:
  - Access Management
  properties:
  - type: OpenAPI
    url: openapi/mend-access-management-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-login-model-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-login-model-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-session-info-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-v3-access-token-response-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-v3-login-response-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-session-info-schema.json
- aid: mend:mend-access-management-organizations-api
  name: Mend Access Management - Organizations API
  description: The Access Management - Organizations API from Mend — 2 operation(s) for access management - organizations.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Access Management - Organizations
  properties:
  - type: OpenAPI
    url: openapi/mend-access-management-organizations-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-collection-domain-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-session-info-schema.json
- aid: mend:mend-administration-groups-api
  name: Mend Administration - Groups API
  description: The Administration - Groups API from Mend — 6 operation(s) for administration - groups.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Administration - Groups
  properties:
  - type: OpenAPI
    url: openapi/mend-administration-groups-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-list-group-with-role-definitions-summary-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-list-multiple-group-roles-per-context-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-list-group-summary-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-list-user-info-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-group-role-request-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-update-group-request-dto-schema.json
- aid: mend:mend-administration-labels-api
  name: Mend Administration - Labels API
  description: The Administration - Labels API from Mend — 2 operation(s) for administration - labels.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Administration - Labels
  properties:
  - type: OpenAPI
    url: openapi/mend-administration-labels-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-list-organization-label-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-domain-label-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-organization-label-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-v3-message-dto-schema.json
- aid: mend:mend-administration-users-api
  name: Mend Administration - Users API
  description: The Administration - Users API from Mend — 5 operation(s) for administration - users.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Administration - Users
  properties:
  - type: OpenAPI
    url: openapi/mend-administration-users-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-list-user-info-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-v3-user-info-response-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-v3-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-v3-boolean-schema.json
  - type: JSONSchema
    url: json-schema/mend-invite-user-request-dto-schema.json
- aid: mend:mend-ai-api
  name: Mend AI API
  description: The AI API from Mend — 1 operation(s) for ai.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Artificial Intelligence
  tags_raw:
  - AI
  properties:
  - type: OpenAPI
    url: openapi/mend-ai-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-v3-v3-implementation-weakness-response-schema.json
- aid: mend:mend-alerts-product-api
  name: Mend Alerts - Product API
  description: The Alerts - Product API from Mend — 3 operation(s) for alerts - product.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Alerts - Product
  properties:
  - type: OpenAPI
    url: openapi/mend-alerts-product-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-legal-and-compliance-alert-base-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-security-alert-library-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-security-alert-dto-schema.json
- aid: mend:mend-alerts-project-api
  name: Mend Alerts - Project API
  description: The Alerts - Project API from Mend — 6 operation(s) for alerts - project.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Alerts - Project
  properties:
  - type: OpenAPI
    url: openapi/mend-alerts-project-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-legal-and-compliance-alert-base-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-security-alert-library-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-security-alert-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-update-risk-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-boolean-schema.json
- aid: mend:mend-applications-api
  name: Mend Applications API
  description: The Applications API from Mend — 8 operation(s) for applications.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Application
  tags_raw:
  - Applications
  properties:
  - type: OpenAPI
    url: openapi/mend-applications-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-multi-context-request-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-list-application-summary-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-collection-application-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-list-scan-summary-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-sbom-scan-response-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-label-request-dtov3-schema.json
- aid: mend:mend-asynchronous-process-control-api
  name: Mend Asynchronous Process Control API
  description: The Asynchronous Process Control API from Mend — 1 operation(s) for asynchronous process control.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Asynchronous Process Control
  properties:
  - type: OpenAPI
    url: openapi/mend-asynchronous-process-control-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-async-process-status-v2-dto-schema.json
- aid: mend:mend-customattribute-organization-api
  name: Mend CustomAttribute - Organization API
  description: The CustomAttribute - Organization API from Mend — 2 operation(s) for customattribute - organization.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - CustomAttribute - Organization
  properties:
  - type: OpenAPI
    url: openapi/mend-customattribute-organization-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-list-custom-attribute-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-custom-attribute-value-dto-schema.json
- aid: mend:mend-customattribute-product-api
  name: Mend CustomAttribute - Product API
  description: The CustomAttribute - Product API from Mend — 1 operation(s) for customattribute - product.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - CustomAttribute - Product
  properties:
  - type: OpenAPI
    url: openapi/mend-customattribute-product-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-custom-attribute-value-dto-schema.json
- aid: mend:mend-customattribute-project-api
  name: Mend CustomAttribute - Project API
  description: The CustomAttribute - Project API from Mend — 1 operation(s) for customattribute - project.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - CustomAttribute - Project
  properties:
  - type: OpenAPI
    url: openapi/mend-customattribute-project-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-custom-attribute-value-dto-schema.json
- aid: mend:mend-dependencies-source-files-api
  name: Mend Dependencies Source Files API
  description: The Dependencies Source Files API from Mend — 8 operation(s) for dependencies source files.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Dependencies Source Files
  properties:
  - type: OpenAPI
    url: openapi/mend-dependencies-source-files-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-source-file-remapping-app-request-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-source-file-remapping-org-request-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-library-match-suggestions-request-dtov3-match-suggestions-schema.json
  - type: JSONSchema
    url: json-schema/mend-source-files-remapping-async-status-dto-v3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-v3-collection-source-file-inventory-dtov3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-v3-collection-source-library-response-dto-match-suggestions-schema.json
- aid: mend:mend-domain-controller-api
  name: Mend Domain Controller API
  description: The domain-controller API from Mend — 1 operation(s) for domain-controller.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - domain-controller
  properties:
  - type: OpenAPI
    url: openapi/mend-domain-controller-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-collection-domain-dto-schema.json
- aid: mend:mend-entities-organization-api
  name: Mend Entities - Organization API
  description: The Entities - Organization API from Mend — 7 operation(s) for entities - organization.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Entities - Organization
  properties:
  - type: OpenAPI
    url: openapi/mend-entities-organization-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-domain-entities-product-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-domain-entities-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-product-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-project-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-created-create-project-response-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-created-product-dto-schema.json
- aid: mend:mend-entities-product-api
  name: Mend Entities - Product API
  description: The Entities - Product API from Mend — 2 operation(s) for entities - product.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Entities - Product
  properties:
  - type: OpenAPI
    url: openapi/mend-entities-product-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-project-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-created-project-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-create-project-by-product-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-context-entity-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-product-dto-schema.json
- aid: mend:mend-entities-project-api
  name: Mend Entities - Project API
  description: The Entities - Project API from Mend — 3 operation(s) for entities - project.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Entities - Project
  properties:
  - type: OpenAPI
    url: openapi/mend-entities-project-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-project-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-vitals-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-context-entity-request-dto-schema.json
- aid: mend:mend-findings-project-api
  name: Mend Findings - Project API
  description: The Findings - Project API from Mend — 26 operation(s) for findings - project.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Findings - Project
  properties:
  - type: OpenAPI
    url: openapi/mend-findings-project-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-model-security-finding-external-schema.json
  - type: JSONSchema
    url: json-schema/mend-github-com-mend-cloud-native-modules-common-model-finding-status-schema.json
  - type: JSONSchema
    url: json-schema/mend-github-com-mend-cloud-native-modules-scanner-model-secret-finding-schema.json
  - type: JSONSchema
    url: json-schema/mend-dto-patch-finding-schema.json
- aid: mend:mend-findings-scan-api
  name: Mend Findings - Scan API
  description: The Findings - Scan API from Mend — 5 operation(s) for findings - scan.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Findings - Scan
  properties:
  - type: OpenAPI
    url: openapi/mend-findings-scan-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-model-security-finding-external-schema.json
  - type: JSONSchema
    url: json-schema/mend-github-com-mend-cloud-native-modules-scanner-model-secret-finding-schema.json
  - type: JSONSchema
    url: json-schema/mend-dto-mend-cursored-response-array-dto-finding-v3-schema.json
  - type: JSONSchema
    url: json-schema/mend-dto-mend-response-dto-finding-v3-schema.json
  - type: JSONSchema
    url: json-schema/mend-common-base-api-response-v3-schema.json
  - type: JSONSchema
    url: json-schema/mend-github-com-mend-cloud-native-modules-scanner-model-package-schema.json
- aid: mend:mend-general-info-licenses-api
  name: Mend General Info - Licenses API
  description: The General Info - Licenses API from Mend — 2 operation(s) for general info - licenses.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - General Info - Licenses
  properties:
  - type: OpenAPI
    url: openapi/mend-general-info-licenses-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-license-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-license-dto-schema.json
- aid: mend:mend-general-info-permissions-api
  name: Mend General Info - Permissions API
  description: The General Info - Permissions API from Mend — 1 operation(s) for general info - permissions.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - General Info - Permissions
  properties:
  - type: OpenAPI
    url: openapi/mend-general-info-permissions-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-list-role-permissions-dto-schema.json
- aid: mend:mend-general-info-vulnerabilities-api
  name: Mend General Info - Vulnerabilities API
  description: The General Info - Vulnerabilities API from Mend — 2 operation(s) for general info - vulnerabilities.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - General Info - Vulnerabilities
  properties:
  - type: OpenAPI
    url: openapi/mend-general-info-vulnerabilities-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-vulnerability-fix-summary-info-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-vulnerability-profile-dto-schema.json
- aid: mend:mend-integrations-api
  name: Mend Integrations API
  description: The Integrations API from Mend — 1 operation(s) for integrations.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Integration
  tags_raw:
  - Integrations
  properties:
  - type: OpenAPI
    url: openapi/mend-integrations-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-v3-list-integration-dtov3-schema.json
- aid: mend:mend-library-organization-api
  name: Mend Library - Organization API
  description: The Library - Organization API from Mend — 10 operation(s) for library - organization.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Library - Organization
  properties:
  - type: OpenAPI
    url: openapi/mend-library-organization-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-library-version-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-list-light-library-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-project-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-copyright-reference-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-in-house-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-library-license-request-dto-schema.json
- aid: mend:mend-library-product-api
  name: Mend Library - Product API
  description: The Library - Product API from Mend — 6 operation(s) for library - product.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Library - Product
  properties:
  - type: OpenAPI
    url: openapi/mend-library-product-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-list-vulnerability-profile-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-list-due-diligence-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-list-light-library-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-project-list-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-list-project-library-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-collection-project-dto-schema.json
- aid: mend:mend-library-project-api
  name: Mend Library - Project API
  description: The Library - Project API from Mend — 5 operation(s) for library - project.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Library - Project
  properties:
  - type: OpenAPI
    url: openapi/mend-library-project-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-list-due-diligence-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-list-light-library-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-list-library-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-list-vulnerability-profile-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-collection-library-impact-dto-schema.json
- aid: mend:mend-library-source-files-api
  name: Mend Library - Source Files API
  description: The Library - Source Files API from Mend — 2 operation(s) for library - source files.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Library - Source Files
  properties:
  - type: OpenAPI
    url: openapi/mend-library-source-files-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-pageable-collection-source-file-inventory-dto-schema.json
- aid: mend:mend-policies-organization-api
  name: Mend Policies - Organization API
  description: The Policies - Organization API from Mend — 4 operation(s) for policies - organization.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Policies - Organization
  properties:
  - type: OpenAPI
    url: openapi/mend-policies-organization-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-policy-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-update-priorities-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-collection-policy-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-async-process-status-v2-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-policy-dto-schema.json
- aid: mend:mend-policies-product-api
  name: Mend Policies - Product API
  description: The Policies - Product API from Mend — 4 operation(s) for policies - product.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Policies - Product
  properties:
  - type: OpenAPI
    url: openapi/mend-policies-product-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-policy-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-update-priorities-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-collection-policy-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-async-process-status-v2-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-policy-dto-schema.json
- aid: mend:mend-policies-project-api
  name: Mend Policies - Project API
  description: The Policies - Project API from Mend — 4 operation(s) for policies - project.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - Policies - Project
  properties:
  - type: OpenAPI
    url: openapi/mend-policies-project-api-openapi.yml
  - type: APIReference
    url: https://api-docs.mend.io/platform/3.0
  - type: APIReference
    url: https://api-docs.mend.io/sca/2.0
  - type: JSONSchema
    url: json-schema/mend-policy-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-update-priorities-request-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-collection-policy-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-async-process-status-v2-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-message-dto-schema.json
  - type: JSONSchema
    url: json-schema/mend-dwrresponse-policy-dto-schema.json
- aid: mend:mend-product-attribution-report-controller-api
  name: Mend Product Attribution Report Controller API
  description: The product-attribution-report-controller API from Mend — 1 operation(s) for product-attribution-report-controller.
  humanURL: https://api-docs.mend.io/platform/3.0
  baseURL: https://api-saas.mend.io
  tags:
  - product-attribution-report-controller
  properties:


# --- truncated at 32 KB (45 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mend/refs/heads/main/apis.yml

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/mend"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/mend/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/mend/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.