Welcome to the Saner API Reference. The Saner APIs let you programmatically manage and automate the Saner Platform and Saner CVEM from your own tools, scripts, and workflows. To learn more about the Saner Python SDK, or the Saner API Docs MCP Server, see the Guides section.
The API Reference is organised by product, so you can go straight to the APIs for the part of Saner you are working with.
Saner Platform
The Saner Platform APIs let you administer your Saner environment programmatically. Use them to set up and manage organizations, accounts, and users, organize devices into groups, enforce multi-factor authentication, and retrieve reports for analysis and sharing.
Saner CVEM
The Saner CVEM APIs let you automate endpoint security from discovery through remediation. Deploy agents and manage devices, track your cyber hygiene score, and identify vulnerabilities, compliance gaps, and posture anomalies. Then prioritize risk and resolve it through patch management and software deployment. Active Directory and network scanner integrations are also available to extend your visibility.
Quick Start
1. Get your API key
Every request to the Saner APIs must be authenticated with an API key, and there are no public endpoints. Request your API key before you begin.
2. Try an API from the documentation
You don't need to write any code to see an API in action. Each endpoint page includes an interactive Try It panel: select an endpoint, enter your API key and the required parameters, and click Try It to run the request and view the status code, response body, and headers. For a step-by-step walkthrough, see Your First API Call.
3. Request and response format
Requests are sent as POST calls to the perform endpoint with a JSON body. The method key selects the operation, and multiple records can be batched in one request using parameterset. Write and action operations return a common JSON structure with a SUCCESS or FAIL status and a reason for each record, while a few operations, such as agent downloads and PDF reports, return a ZIP file containing the payload and its signature. See Request & Response Format for headers, examples, and the full list of ZIP-returning APIs.
4. Authentication and JSON schemas
Include your API key in the Authorization header of every request, and pass the accountid query parameter for account-scoped operations such as Device, Group, Organization, Configuration, Remediation, and Reports. Store your API key securely and never commit it to source control. The request and response JSON schemas, along with a field-by-field reference, are available in Authentication & JSON Schemas.
5. Pagination
To keep responses fast when working with large datasets, the getReportApiData API supports pagination for selected reports across the DM, AE, VM, EM, PM, and CM modules. Use the limit and page request parameters to control page size, and use the isNextPage and totalPages response fields to iterate until you have retrieved every record. See Pagination Support for the list of supported reports and a complete example.