Overview - Secfix Developers (Staging)

This reference is generated from the API’s OpenAPI 3.0 contract. Each endpoint page shows the parameters, request body, and responses, and lets you try the request.

Base URLs

Environment	Base URL
Production	`https://api.secfix.com`
Staging	`https://api-staging.secfix.com`

Authentication

Every /v1 endpoint except GET /v1/health requires a bearer access token. Get one with the OAuth 2.0 client_credentials grant at POST /oauth/token, then send it as Authorization: Bearer <token>. See Authentication and Scopes.

Endpoints

Group	Endpoint	Method and path	Access
OAuth	Get an access token	`POST /oauth/token`	None
Health	Check API health	`GET /v1/health`	None
Inventory	List assets	`GET /v1/inventory/assets`	Read
Inventory	Get an asset	`GET /v1/inventory/assets/{id}`	Read
Inventory	Create or update an asset	`POST /v1/inventory/assets`	Write
Inventory	Create assets in a batch	`POST /v1/inventory/assets/batch-create`	Write
Inventory	Update an asset	`PATCH /v1/inventory/assets/{id}`	Write
Inventory	Update assets in a batch	`PATCH /v1/inventory/assets/batch-update`	Write
Inventory	Delete an asset	`DELETE /v1/inventory/assets/{id}`	Write
Inventory	Delete assets in a batch	`POST /v1/inventory/assets/batch-delete`	Write
Inventory	List asset categories	`GET /v1/inventory/categories`	Read
Computers	List computers	`GET /v1/computers`	Read
Computers	Get a computer	`GET /v1/computers/{id}`	Read
Employees	List employees	`GET /v1/employees`	Read
Employees	Get an employee	`GET /v1/employees/{id}`	Read
Groups	List groups	`GET /v1/groups`	Read
Groups	Get a group	`GET /v1/groups/{id}`	Read

Read is the all:read scope and Write is all:write.

Conventions

Pagination: list endpoints return cursor-based pages. See Pagination.
Errors: JSON body with a stable code. See Errors.
Rate limits: separate limits for token, read, and write requests. See Rate limits.
Versioning: only additive changes within /v1. See Versioning.

Download the spec

Download the contract at /api-reference/openapi.yaml. Use it to generate a client or import it into your API tool.