List all applications with optional pagination and sorting

Get detailed information about a specific application

Create a new application

Update an existing application

Delete an application. This will also delete all associated scan configs, scans, and vulnerabilities.

Add or remove tags from an application

List scans with optional pagination, sorting, and filtering

Get detailed information about a specific scan

Submit a new scan based on a scan configuration

Delete a scan. Only scans in FAILED status can be deleted.

Control a running scan (pause, resume, stop, or cancel)

Get real-time execution metrics for a running or completed scan

Get engine event logs for a scan

List scan configurations with optional pagination

Get detailed information about a specific scan configuration

Create a new scan configuration for an application

Update an existing scan configuration

Delete a scan configuration

List vulnerabilities with optional pagination, sorting, and filtering

Get detailed information about a specific vulnerability

Update the status or severity of a vulnerability

Get the discovery history for a vulnerability

List all comments on a vulnerability

Add a comment to a vulnerability

List scan schedules with optional pagination

Get detailed information about a specific schedule

Create a new scan schedule for automated recurring scans

Update an existing scan schedule

Delete a scan schedule

List blackout windows with optional pagination

Get detailed information about a specific blackout window

Create a blackout window to prevent scans during maintenance periods

Update an existing blackout window

Delete a blackout window

List registered scan engines with optional pagination

Get detailed information about a specific scan engine

List engine groups with optional pagination

Get detailed information about a specific engine group

List generated reports with optional pagination

Generate a new vulnerability report for an application or scan

Get the status and details of a generated report

Universal search across InsightAppSec resources using DSL query syntax.

Examples:

• Search high severity vulns: type=VULNERABILITY, query="vulnerability.severity='HIGH'"

• Search running scans: type=SCAN, query="scan.status='RUNNING'"

• Search apps by name: type=APP, query="app.name CONTAINS 'prod'"

Query operators: =, !=, <, >, <=, >=, CONTAINS, IN, AND, OR

List all files for an application (macros, traffic files, selenium scripts, etc.)

Get file metadata by ID

Create file metadata entry. After creating, use upload_file_content to upload the actual file.

Supported file types:

• MACRO: Recorded authentication sequences (.rec)

• RECORDED_TRAFFIC: HTTP traffic captures (.har, .trec, .saz)

• SELENIUM: Browser automation scripts (.html, .side)

• CERTIFICATE: SSL certificates (.pfx)

• SWAGGER: API specifications (.json, .yaml)

• WSDL: Web service definitions (.wsdl)

• GRAPHQL: GraphQL schemas (.graphqls)

Upload binary file content. The file metadata must be created first using create_file.

Delete a file from an application

Download file content as base64-encoded string

Get the full scan configuration options including authentication settings

Configure form-based authentication (username/password login) for a scan configuration

Configure OAuth 2.0 authentication for a scan configuration

Configure global token replacement rules to extract tokens from responses and inject them into subsequent requests.

Use this for dynamic tokens like CSRF tokens, API keys, or session identifiers that need to be captured and replayed.

Configure session management including cookie handling and automatic re-login on session loss

Configure automatic CSRF token detection and injection

Configure macro-based authentication using a previously uploaded macro file

Configure traffic-based authentication using a previously uploaded traffic file (.har, .trec, .saz)