Traceable

Traceable is an API security and observability platform that provides API discovery, threat detection, and protection across the full application lifecycle. It uses context-aware AI to detect and block API-based attacks while providing deep visibility into API behavior and risk. Traceable exposes public GraphQL APIs for configuration, analytics, and operational data access, as well as an MCP server with 12 tools for AI-assisted security workflows.

3 APIs 0 Features

API DiscoveryAPI ProtectionAPI SecurityAPI TestingObservabilitySecurityThreat Detection

APIs

Traceable Platform GraphQL API

The Traceable Platform GraphQL API provides programmatic access to API security configuration and operational data. Supports queries for API discovery analytics, vulnerability d...

Traceable API Security Platform

Traceable provides an intelligent API security platform offering API discovery, threat detection and protection, and API security testing. It uses distributed tracing and contex...

Traceable Active Security Testing

Traceable Active Security Testing (AST) provides automated API security testing with GraphQL-based configuration for scan creation, suite management, and CI/CD pipeline integrat...

Collections

Traceable Platform API

OPEN

GraphQL

Traceable GraphQL API

The Traceable Platform GraphQL API provides programmatic access to API security configuration and operational data. Supports queries for API discovery analytics, vulnerability d...

GRAPHQL

Pricing Plans

Traceable Plans Pricing

1 plans

PLANS

Rate Limits

Traceable Rate Limits

1 limits

RATE LIMITS

FinOps

Traceable Finops

FINOPS

Semantic Vocabularies

Traceable Context

33 classes · 0 properties

JSON-LD

API Governance Rules

Traceable API Rules

10 rules · 5 errors 5 warnings

SPECTRAL

JSON Structure

Traceable Api Entity Structure

0 properties

JSON STRUCTURE

Example Payloads

Traceable Download Api Spec Example

2 fields

EXAMPLE

Traceable Execute Graphql Query Example

2 fields

EXAMPLE

Resources

Sources

opencollection: 1.0.0
info:
  name: Traceable Platform API
  version: '1.0'
request:
  auth:
    type: bearer
    token: '{{bearerToken}}'
items:
- info:
    name: GraphQL
    type: folder
  items:
  - info:
      name: Execute GraphQL Query
      type: http
    http:
      method: POST
      url: https://api.traceable.ai/graphql
      body:
        type: json
        data: '{}'
    docs: Executes a GraphQL query or mutation against the Traceable platform. Supports queries for entities, vulnerabilities,
      threat activity, explore datasets, API testing data, analytics batches, and authentication hooks. Use the Authorization
      header with your platform API token.
  - info:
      name: Execute MCP Tool
      type: http
    http:
      method: POST
      url: https://api.traceable.ai/mcp
      body:
        type: json
        data: '{}'
    docs: Executes a tool via the Traceable MCP (Model Context Protocol) server. The MCP server exposes 12 tools for AI-assisted
      security workflows including attribute mappings, GraphQL query templates, threat activity time ranges, vulnerability
      filter values, sensitive data type details, and trend data calculation.
- info:
    name: Specifications
    type: folder
  items:
  - info:
      name: Download API Specification
      type: http
    http:
      method: GET
      url: https://api.traceable.ai/rest/download
      params:
      - name: format
        value: ''
        type: query
        description: Specification format to download.
      - name: service
        value: ''
        type: query
        description: Filter specification to a specific service name.
      - name: domain
        value: ''
        type: query
        description: Filter specification to a specific domain.
      - name: label
        value: ''
        type: query
        description: Filter specification by API label.
      - name: environment
        value: ''
        type: query
        description: Filter specification by deployment environment.
    docs: Downloads the OpenAPI or WSDL specification generated from discovered API traffic for the authenticated environment.
      The specification reflects the actual observed API surface including endpoints, parameters, and request/response schemas.
      Use the createApiDefinition GraphQL mutation to trigger generation first, then retrieve the download URL via getApiDefinition
      query.
bundled: true