Skip to main content
Version: 1.0.0

Plexicus API

REST API for the Plexicus AI-powered Application Security Posture Management (ASPM) platform.

Plexicus aggregates results from open-source and commercial security scanners (SAST, SCA, secrets, container, cloud and DAST), normalizes them into unified findings, and drives AI-assisted remediation through pull requests and ticketing integrations.

Authentication​

All endpoints require a Bearer token in the Authorization header unless stated otherwise. Tokens are scoped: each endpoint declares the scope it requires, and requests with insufficient scopes receive 403 Forbidden.

Errors​

Errors are returned as application/problem+json (RFC 7807) with title, status and detail fields.

Request tracing​

Every response includes an X-Flow-ID header that can be used to correlate requests across services when reporting issues.

Authentication​

Security Scheme Type:

oauth2

OAuth Flow (authorizationCode):

Scopes:

  • uid: Default pseudo-scope required for all authenticated clients

  • plexicus.account.write: Delete own account

  • plexicus.backoffice.admin: Full backoffice administration access (manage clients, backoffice users, partners, pricings, database maintenance, analytics)

  • plexicus.charts.read: Read dashboard and graph data

  • plexicus.client-subscriptions.admin: Administer client subscription plans

  • plexicus.client-team.read: Read client team invitations and members

  • plexicus.client-team.write: Manage client team invitations and members

  • plexicus.clients.read: Read client records

  • plexicus.clients.write: Create or update client records

  • plexicus.container-specs.write: Create, update, or delete container specs and scans

  • plexicus.findings.read: Read security findings

  • plexicus.findings.write: Create, update, or validate security findings

  • plexicus.issues.write: Create issues on SCM providers

  • plexicus.plexalyzer-tokens.write: Generate or revoke plexalyzer tokens

  • plexicus.pull-requests.write: Create pull requests from remediations

  • plexicus.reference-data.read: Read static reference data (finding types, OWASP categories, scanners, SCM providers, supply chain categories)

  • plexicus.remediations.read: Read remediation records

  • plexicus.remediations.write: Generate or update remediation records

  • plexicus.repositories.read: Read repositories

  • plexicus.repositories.write: Create, update, or delete repositories

  • plexicus.repository-scans.write: Request, upload, or receive repository scans

  • plexicus.repository-webhooks.write: Create or receive repository webhook events

  • plexicus.billing.read: Read end-user billing data (invoices, customer info, subscription status)

  • plexicus.billing.write: Manage end-user billing (checkout sessions, subscription actions, customer data)

  • plexicus.billing-plans.read: Read platform billing plans and meter usage

  • plexicus.billing-plans.write: Manage platform billing plans, products, and meter configuration

  • plexicus.ticketing-integrations.admin: Administer ticketing service integrations

  • plexicus.ticketing-integrations.read: Read ticketing service integrations

  • plexicus.tickets.read: Read tickets

  • plexicus.tickets.write: Create, update, close, or comment on tickets

  • plexicus.scm-integrations.read: Read SCM provider integration config

  • plexicus.scm-integrations.write: Manage SCM provider integrations and tokens

  • plexicus.user-connectors.read: Read user connectors

  • plexicus.user-connectors.write: Create, update, or delete user connectors

  • plexicus.users.read: Read developer users

  • plexicus.roles.read: Read role catalog

  • plexicus.roles.admin: Administer role catalog

  • plexicus.role-assignments.write: Assign or revoke roles for users

  • plexicus.permissions.read: Read permission catalog

  • plexicus.audit-logs.read: Read audit log entries

  • plexicus.audit-logs.verify: Verify audit log chain integrity