For the complete documentation index, see llms.txt. This page is also available as Markdown.

Fetch Data

API
Description

POST /api/getAllCollectionsBasic

Fetch a lightweight list of all API collections with only basic metadata. Useful for quick lookups or dropdowns.

POST /api/getAllCollections

Retrieve the complete list of all API collections with detailed information.

POST /api/getAllUsersCollections

Fetch all API collections accessible to the current user.

POST /api/getCoverageInfoForCollections

Get test coverage data for each collection (e.g., how many endpoints are tested vs. untested).

POST /api/getSeverityInfoForCollections

Retrieve aggregated severity information (High, Medium, Low) across API collections.

POST /api/getSeveritiesCountPerCollection

Get the count of issues grouped by severity for each collection.

POST /api/getLastSeenTrafficInfoForCollections

Fetch last seen traffic timestamps for each collection, helping track activity recency.

POST /api/getSensitiveInfoForCollections

Retrieve sensitive data findings per collection (e.g., PII, secrets).

POST /api/getRiskScoreInfo

Get risk scores calculated for API collections, based on threats and sensitive data exposure.

POST /api/fetchCollectionWiseApiEndpoints

Fetch all API endpoints belonging to a specific collection.

POST /api/fetchApiInfosForCollection

Retrieve detailed API information for a given collection (method, path, params, etc.).

POST /api/fetchApiInfosFromSTIs

Fetch API details using stored traffic identifiers (STIs). Useful for replay or drill-down.

POST /api/fetchEndpointsCount

Get a count of API endpoints per collection.

POST /api/fetchApiCallStats

Retrieve traffic statistics such as call counts, trends, and usage metrics per API.

POST /api/fetchIpLevelApiCallStats

Get API call stats broken down by IP, useful for identifying abusive clients or usage patterns.

POST /api/fetchSampleData

Fetch sample request/response payloads observed for a given API, used for testing or schema generation.

POST /api/generateOpenApiFile

Generate an OpenAPI (Swagger) specification file from discovered API data.

POST /api/fetchOpenApiSchema

Returns the stored OpenAPI/Swagger schema for the given API collection.

POST /api/fetchSwaggerImportLogs

Returns import status and per-endpoint parsing details for a previous Swagger/OpenAPI file upload.

POST /api/fetchPostmanImportLogs

Returns import status and per-endpoint parsing details for a previous Postman file upload.

/api/getAllCollectionsBasic

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
objectOptional
Responses
200

description

application/json
post
/api/getAllCollectionsBasic
200

description

/api/getSeverityInfoForCollections

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
objectOptional
Responses
200

description

application/json
Responseobject
post
/api/getSeverityInfoForCollections
200

description

/api/getLastSeenTrafficInfoForCollections

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
objectOptional
Responses
200

description

application/json
post
/api/getLastSeenTrafficInfoForCollections
200

description

/api/getSensitiveInfoForCollections

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
objectOptional
Responses
200

description

application/json
post
/api/getSensitiveInfoForCollections
200

description

/api/getRiskScoreInfo

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
objectOptional
Responses
200

description

application/json
post
/api/getRiskScoreInfo
200

description

/api/getCoverageInfoForCollections

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
objectOptional
Responses
200

description

application/json
Responseobject
post
/api/getCoverageInfoForCollections
200

description

/api/getAllCollections

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
objectOptional
Responses
200

description

application/json
post
/api/getAllCollections
200

description

/api/getAllUsersCollections

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
objectOptional
Responses
200

description

application/json
post
/api/getAllUsersCollections
200

description

/api/getSeveritiesCountPerCollection

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
apiCollectionIdinteger · int32RequiredExample: 1111111111
Responses
200

description

application/json
Responseobject
post
/api/getSeveritiesCountPerCollection
200

description

/api/fetchCollectionWiseApiEndpoints

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
apiCollectionIdstringRequiredExample: null
Responses
200

description

application/json
post
/api/fetchCollectionWiseApiEndpoints
200

description

/api/fetchIpLevelApiCallStats

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
methodstringRequiredExample: GET
startWindowinteger · int32RequiredExample: 29280083
endWindowinteger · int32RequiredExample: 29281523
apiCollectionIdinteger · int32RequiredExample: 1111111111
urlstringRequiredExample: https://vulnerable-server.akto.io/api/college/revenue/32483
Responses
200

description

application/json
post
/api/fetchIpLevelApiCallStats
200

description

/api/fetchApiInfosForCollection

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
apiCollectionIdinteger · int32RequiredExample: 1111111111
Responses
200

description

application/json
post
/api/fetchApiInfosForCollection
200

description

/api/fetchApiCallStats

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
methodstringRequiredExample: GET
endEpochinteger · int32RequiredExample: 1756891391
apiCollectionIdinteger · int32RequiredExample: 1111111111
startEpochinteger · int32RequiredExample: 1756804989
urlstringRequiredExample: https://vulnerable-server.akto.io/api/college/revenue/32483
Responses
200

description

application/json
post
/api/fetchApiCallStats
200

description

/api/fetchApiInfosFromSTIs

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
apiCollectionIdinteger · int32RequiredExample: 1111111111
Responses
200

description

application/json
post
/api/fetchApiInfosFromSTIs
200

description

/api/fetchEndpointsCount

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
endTimestampinteger · int32RequiredExample: 0
startTimestampinteger · int32RequiredExample: 0
Responses
200

description

application/json
post
/api/fetchEndpointsCount
200

description

/api/fetchSampleData

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
methodstringRequiredExample: GET
apiCollectionIdinteger · int32RequiredExample: 1111111111
urlstringRequiredExample: https://vulnerable-server.akto.io/api/college/revenue/32483
Responses
200

description

application/json
post
/api/fetchSampleData
200

description

/api/generateOpenApiFile

post
Header parameters
x-api-keystringRequired

You can get this from Settings > Integrations > Akto APls > Generate token

Example: API_KEY
Body
lastFetchedMethodstringRequiredExample: GET
apiCollectionIdinteger · int32RequiredExample: 1111111111
lastFetchedUrlstringRequiredExample: https://vulnerable-server.akto.io/api/v2/feePayment
Responses
200

description

application/json
post
/api/generateOpenApiFile
200

description

Fetch OpenAPI schema for a collection

post

Returns the stored OpenAPI/Swagger schema (gunzipped from the database) for the given API collection as a JSON string.

Source: OpenApiAction.fetchOpenApiSchema()

Body
apiCollectionIdintegerRequired

Numeric ID of the API collection whose OpenAPI schema to retrieve.

Example: 1234567890
Responses
200

OpenAPI schema returned.

application/json
openApiSchemastringOptional

The OpenAPI 3.x / Swagger 2.x schema as a JSON string.

Example: {"openapi":"3.0.1","info":{"title":"My API","version":"1.0.0"},"paths":{}}
actionErrorsstring[]Optional
post
/api/fetchOpenApiSchema
200

OpenAPI schema returned.

Fetch Swagger file upload logs

post

Returns the import status and per-endpoint parsing details for a previous Swagger/OpenAPI file upload identified by uploadId. Use this to inspect which endpoints parsed successfully, which had non-fatal errors, and which could not be imported at all.

Source: OpenApiAction.fetchImportLogs()

Body
uploadIdstringRequired

ID of the Swagger file upload record to inspect.

Example: upload_abc123def456
Responses
200

Upload details returned.

application/json
actionErrorsstring[]Optional
post
/api/fetchSwaggerImportLogs
200

Upload details returned.

Fetch Postman file upload logs

post

Returns import status and per-endpoint parsing details for a previous Postman file upload.

Source: PostmanAction.fetchImportLogs()

Body
uploadIdstringRequired

ID of the Postman file upload record to inspect.

Example: postman_upload_xyz789
Responses
200

Upload details returned.

application/json
actionErrorsstring[]Optional
post
/api/fetchPostmanImportLogs
200

Upload details returned.

Last updated