openapi: 3.2.0
info:
  title: Cisco ISE API - TrustSec ACI Data API
  version: 1.0.0
  x-provenance:
    method: harvested
    authored_by: Cisco
    harvested_by: API Evangelist
    harvested_on: '2026-08-19'
    first_party: true
    provider_published: true
    source_host: pubhub.devnetcloud.com
    note: 103 ISE API descriptions (1,490 operations; 32 OpenAPI 3.0.x + 71 Swagger 2.0) enumerated from Cisco's own DevNet project manifest and fetched anonymously. Byte-identity reconfirmed 2026-08-19 by SHA-256 against the live source.
  x-evidence:
  - type: source
    url: https://pubhub.devnetcloud.com/media/identity-services-engine-api-v1/docs/
  - type: source
    url: https://developer.cisco.com/docs/identity-services-engine/
servers:
- url: https://172.23.118.207:443
  description: Inferred Url
tags:
- name: ACI Data
paths:
  /api/v1/trustsec/integration/aci-connection/application-profile/fetch:
    post:
      tags:
      - ACI Data
      summary: Get application profile list from ACI
      operationId: getApplicationProfilesPrefetch
      parameters:
      - name: X-Request-ID
        in: header
        description: The request ID header consists of the request ID which is returned in the response headers and also appears in the API service logs.
        required: false
        schema:
          type: string
          exampleSetFlag: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AciConnectionAccessInfo'
              exampleSetFlag: false
      responses:
        '200':
          description: Application profile list response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StringListResponse'
                exampleSetFlag: false
        '201':
          description: Created
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not Found
  /api/v1/trustsec/integration/aci-connection/epg/fetch:
    post:
      tags:
      - ACI Data
      summary: Get EPG list from ACI
      operationId: getEpgsPrefetch
      parameters:
      - name: X-Request-ID
        in: header
        description: The request ID header consists of the request ID which is returned in the response headers and also appears in the API service logs.
        required: false
        schema:
          type: string
          exampleSetFlag: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/FetchEpgRequest'
              exampleSetFlag: false
      responses:
        '200':
          description: EPG list response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EpgListResponse'
                exampleSetFlag: false
        '201':
          description: Created
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not Found
  /api/v1/trustsec/integration/aci-connection/selected-epg/application-profile/get:
    post:
      tags:
      - ACI Data
      summary: Get application profiles from selected EPGs with filters
      operationId: getApplicationProfilesFilter
      parameters:
      - name: X-Request-ID
        in: header
        description: The request ID header consists of the request ID which is returned in the response headers and also appears in the API service logs.
        required: false
        schema:
          type: string
          exampleSetFlag: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SelectedEpgFilterRequest'
              exampleSetFlag: false
      responses:
        '200':
          description: Application profile list response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SelectedEpgApplicationProfileResponse'
                exampleSetFlag: false
        '201':
          description: Created
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not Found
  /api/v1/trustsec/integration/aci-connection/selected-epg/epg/get:
    post:
      tags:
      - ACI Data
      summary: Get EPGs from selected EPGs with filters
      operationId: getEpgsFilter
      parameters:
      - name: X-Request-ID
        in: header
        description: The request ID header consists of the request ID which is returned in the response headers and also appears in the API service logs.
        required: false
        schema:
          type: string
          exampleSetFlag: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SelectedEpgFilterRequest'
              exampleSetFlag: false
      responses:
        '200':
          description: EPG list response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SelectedEpgEpgResponse'
                exampleSetFlag: false
        '201':
          description: Created
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not Found
  /api/v1/trustsec/integration/aci-connection/selected-epg/security-group/get:
    post:
      tags:
      - ACI Data
      summary: Get EPGs from selected EPGs with filters
      operationId: getSecurityGroupsFilter
      parameters:
      - name: X-Request-ID
        in: header
        description: The request ID header consists of the request ID which is returned in the response headers and also appears in the API service logs.
        required: false
        schema:
          type: string
          exampleSetFlag: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SelectedEpgFilterRequest'
              exampleSetFlag: false
      responses:
        '200':
          description: EPG list response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SelectedEpgSecurityGroupResponse'
                exampleSetFlag: false
        '201':
          description: Created
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not Found
  /api/v1/trustsec/integration/aci-connection/selected-epg/tenant/get:
    post:
      tags:
      - ACI Data
      summary: Get tenants from selected EPGs with filters
      operationId: getTenantsFilter
      parameters:
      - name: X-Request-ID
        in: header
        description: The request ID header consists of the request ID which is returned in the response headers and also appears in the API service logs.
        required: false
        schema:
          type: string
          exampleSetFlag: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SelectedEpgFilterRequest'
              exampleSetFlag: false
      responses:
        '200':
          description: Tenants
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SelectedEpgTenantResponse'
                exampleSetFlag: false
        '201':
          description: Created
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not Found
  /api/v1/trustsec/integration/aci-connection/selected-epg/virtual-network/get:
    post:
      tags:
      - ACI Data
      summary: Get virtual networks from selected EPGs with filters
      operationId: getVirtualNetworksFilter
      parameters:
      - name: X-Request-ID
        in: header
        description: The request ID header consists of the request ID which is returned in the response headers and also appears in the API service logs.
        required: false
        schema:
          type: string
          exampleSetFlag: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SelectedEpgFilterRequest'
              exampleSetFlag: false
      responses:
        '200':
          description: VN list response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SelectedEpgVirtualNetworkResponse'
                exampleSetFlag: false
        '201':
          description: Created
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not Found
  /api/v1/trustsec/integration/aci-connection/tenant/fetch:
    post:
      tags:
      - ACI Data
      summary: Get tenant list from ACI
      operationId: getTenantsPrefetch
      parameters:
      - name: X-Request-ID
        in: header
        description: The request ID header consists of the request ID which is returned in the response headers and also appears in the API service logs.
        required: false
        schema:
          type: string
          exampleSetFlag: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AciConnectionAccessInfo'
              exampleSetFlag: false
      responses:
        '200':
          description: Tenant list response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StringListResponse'
                exampleSetFlag: false
        '201':
          description: Created
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not Found
  /api/v1/trustsec/integration/aci-connection/virtual-network/fetch:
    post:
      tags:
      - ACI Data
      summary: Get VN list from ACI
      operationId: getVnsPrefetch
      parameters:
      - name: X-Request-ID
        in: header
        description: The request ID header consists of the request ID which is returned in the response headers and also appears in the API service logs.
        required: false
        schema:
          type: string
          exampleSetFlag: true
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AciConnectionAccessInfo'
              exampleSetFlag: false
      responses:
        '200':
          description: VN list response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StringListResponse'
                exampleSetFlag: false
        '201':
          description: Created
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not Found
  /api/v1/trustsec/integration/aci-connection/{connectionId}/l3out:
    get:
      tags:
      - ACI Data
      summary: Get l3Out from ACI connection
      operationId: getAciConnectionL3out
      parameters:
      - name: connectionId
        in: path
        description: Unique id for ACI Connection
        required: true
        style: simple
        schema:
          type: string
          exampleSetFlag: true
      - name: X-Request-ID
        in: header
        description: The request ID header consists of the request ID which is returned in the response headers and also appears in the API service logs.
        required: false
        schema:
          type: string
          exampleSetFlag: true
      responses:
        '200':
          description: L3Out(Layer 3 Out) mapping for a given ACI connection
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/L3OutsResponse'
                exampleSetFlag: false
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not Found
components:
  schemas:
    SelectedEpgVirtualNetworkBelongsTo:
      title: SelectedEpgVirtualNetworkBelongsTo
      type: object
      properties:
        connectionName:
          type: string
          example: ACI1
          exampleSetFlag: true
        tn:
          type: string
          example: tenant1
          exampleSetFlag: true
      exampleSetFlag: false
    SelectedEpgTenantResponse:
      title: SelectedEpgTenantResponse
      required:
      - response
      - version
      type: object
      properties:
        response:
          type: array
          exampleSetFlag: true
          items:
            $ref: '#/components/schemas/SelectedEpgTenant'
            exampleSetFlag: false
        version:
          type: string
          exampleSetFlag: true
      exampleSetFlag: false
    L3Out:
      title: L3Out
      type: object
      properties:
        l3out:
          type: string
          example: l3out1
          exampleSetFlag: true
        tn:
          type: string
          example: tenant1
          exampleSetFlag: true
        vn:
          type: string
          example: vn1
          exampleSetFlag: true
      exampleSetFlag: false
    SelectedEpgSecurityGroupBelongsTo:
      title: SelectedEpgSecurityGroupBelongsTo
      type: object
      properties:
        ap:
          type: string
          example: ap1
          exampleSetFlag: true
        connectionName:
          type: string
          example: ACI1
          exampleSetFlag: true
        epg:
          type: string
          example: epg1
          exampleSetFlag: true
        tn:
          type: string
          example: tenant1
          exampleSetFlag: true
      exampleSetFlag: false
    SelectedEpgApplicationProfile:
      title: SelectedEpgApplicationProfile
      type: object
      properties:
        ap:
          type: string
          example: ap1
          exampleSetFlag: true
        details:
          type: array
          exampleSetFlag: true
          items:
            $ref: '#/components/schemas/SelectedEpgApplicationProfileBelongsTo'
            exampleSetFlag: false
      exampleSetFlag: false
    SelectedEpgTenantBelongsTo:
      title: SelectedEpgTenantBelongsTo
      type: object
      properties:
        connectionName:
          type: string
          example: ACI1
          exampleSetFlag: true
        vn:
          type: string
          example: vn1
          exampleSetFlag: true
      exampleSetFlag: false
    SelectedEpgApplicationProfileBelongsTo:
      title: SelectedEpgApplicationProfileBelongsTo
      type: object
      properties:
        connectionName:
          type: string
          example: ACI1
          exampleSetFlag: true
        tn:
          type: string
          example: tenant1
          exampleSetFlag: true
        vn:
          type: string
          example: vn1
          exampleSetFlag: true
      exampleSetFlag: false
    NameConversion:
      title: NameConversion
      type: object
      properties:
        affixType:
          type: string
          exampleSetFlag: true
          enum:
          - PREFIX
          - SUFFIX
        affixValue:
          type: string
          description: Prefix or suffix value
          exampleSetFlag: true
        attributeConversions:
          type: array
          exampleSetFlag: true
          items:
            $ref: '#/components/schemas/AttributeConversion'
            exampleSetFlag: false
        attributeTypes:
          type: array
          exampleSetFlag: true
          items:
            type: string
            exampleSetFlag: false
            enum:
            - AP
            - CONNECTION_NAME
            - EPG_TYPE
            - TN
            - VN
        method:
          type: string
          description: 'Name conversion method:   * `ATTRIBUTE` - Use attributeTypes and attributeConversions to convert name   * `AFFIX` - Use affixType and affixValue to convert name '
          exampleSetFlag: true
          enum:
          - AFFIX
          - ATTRIBUTE
      description: Name conversion configuration
      exampleSetFlag: false
    SelectedEpgFilterRequest:
      title: SelectedEpgFilterRequest
      type: object
      properties:
        ap:
          type: array
          exampleSetFlag: true
          items:
            type: string
            exampleSetFlag: false
        connectionName:
          type: array
          example: '["ACI1","ACI2"]'
          exampleSetFlag: true
          items:
            type: string
            exampleSetFlag: false
        epg:
          type: array
          exampleSetFlag: true
          items:
            type: string
            exampleSetFlag: false
        sgtName:
          type: array
          exampleSetFlag: true
          items:
            type: string
            exampleSetFlag: false
        sxpDomain:
          type: array
          exampleSetFlag: true
          items:
            type: string
            exampleSetFlag: false
        tn:
          type: array
          exampleSetFlag: true
          items:
            type: string
            exampleSetFlag: false
        vn:
          type: array
          exampleSetFlag: true
          items:
            type: string
            exampleSetFlag: false
      description: Filter parameters for selected EPGs API
      exampleSetFlag: false
    SelectedEpgVirtualNetwork:
      title: SelectedEpgVirtualNetwork
      type: object
      properties:
        details:
          type: array
          exampleSetFlag: true
          items:
            $ref: '#/components/schemas/SelectedEpgVirtualNetworkBelongsTo'
            exampleSetFlag: false
        vn:
          type: string
          example: aci1
          exampleSetFlag: true
      exampleSetFlag: false
    SelectedEpgVirtualNetworkResponse:
      title: SelectedEpgVirtualNetworkResponse
      type: object
      properties:
        response:
          type: array
          exampleSetFlag: true
          items:
            $ref: '#/components/schemas/SelectedEpgVirtualNetwork'
            exampleSetFlag: false
        version:
          type: string
          exampleSetFlag: true
      exampleSetFlag: false
    SelectedEpgSecurityGroupResponse:
      title: SelectedEpgSecurityGroupResponse
      type: object
      properties:
        response:
          type: array
          exampleSetFlag: true
          items:
            $ref: '#/components/schemas/SelectedEpgSecurityGroup'
            exampleSetFlag: false
        version:
          type: string
          exampleSetFlag: true
      exampleSetFlag: false
    SelectedEpgSecurityGroup:
      title: SelectedEpgSecurityGroup
      type: object
      properties:
        details:
          type: array
          exampleSetFlag: true
          items:
            $ref: '#/components/schemas/SelectedEpgSecurityGroupBelongsTo'
            exampleSetFlag: false
        sgtName:
          type: string
          example: sgt1
          exampleSetFlag: true
      exampleSetFlag: false
    SelectedEpgTenant:
      title: SelectedEpgTenant
      type: object
      properties:
        details:
          type: array
          exampleSetFlag: true
          items:
            $ref: '#/components/schemas/SelectedEpgTenantBelongsTo'
            exampleSetFlag: false
        tn:
          type: string
          example: tenant1
          exampleSetFlag: true
      exampleSetFlag: false
    SelectedEpgEpgResponse:
      title: SelectedEpgEpgResponse
      type: object
      properties:
        response:
          type: array
          exampleSetFlag: true
          items:
            $ref: '#/components/schemas/SelectedEpgEpg'
            exampleSetFlag: false
        version:
          type: string
          exampleSetFlag: true
      exampleSetFlag: false
    AttributeConversion:
      title: AttributeConversion
      type: object
      properties:
        from:
          type: string
          description: From original value
          exampleSetFlag: true
        to:
          type: string
          description: To new value
          exampleSetFlag: true
        type:
          type: string
          exampleSetFlag: true
          enum:
          - AP
          - CONNECTION_NAME
          - EPG_TYPE
          - TN
          - VN
      description: Attribute conversion configuration
      exampleSetFlag: false
    AciConnectionAccessInfo:
      title: AciConnectionAccessInfo
      required:
      - hostname
      - name
      - username
      type: object
      properties:
        domain:
          type: string
          description: Auth Domain
          example: Default
          exampleSetFlag: true
        hostname:
          type: string
          description: ACI hostname or IP address
          example: 10.0.0.1
          exampleSetFlag: true
        id:
          type: string
          description: ID if connection is already created
          exampleSetFlag: true
        name:
          type: string
          description: ACI name
          example: ACI1
          exampleSetFlag: true
        password:
          type: string
          description: Password
          example: password1
          exampleSetFlag: true
        username:
          type: string
          description: Username
          example: user1
          exampleSetFlag: true
        validateCertificate:
          type: boolean
          description: ValidationCertificate
          example: false
          exampleSetFlag: true
      description: ACI connection configuration
      exampleSetFlag: false
    EpgListResponse:
      title: EpgListResponse
      type: object
      properties:
        response:
          type: array
          exampleSetFlag: true
          items:
            $ref: '#/components/schemas/Epg'
            exampleSetFlag: false
        version:
          type: string
          exampleSetFlag: true
      exampleSetFlag: false
    FetchEpgRequest:
      title: FetchEpgRequest
      required:
      - hostname
      - name
      - username
      type: object
      properties:
        domain:
          type: string
          description: Auth Domain
          example: Default
          exampleSetFlag: true
        hostname:
          type: string
          description: ACI hostname or IP address
          example: 10.0.0.1
          exampleSetFlag: true
        id:
          type: string
          description: ID if connection is already created
          exampleSetFlag: true
        name:
          type: string
          description: ACI name
          example: ACI1
          exampleSetFlag: true
        nameConversion:
          $ref: '#/components/schemas/NameConversion'
          exampleSetFlag: true
        password:
          type: string
          description: Password
          example: password1
          exampleSetFlag: true
        username:
          type: string
          description: Username
          example: user1
          exampleSetFlag: true
        validateCertificate:
          type: boolean
          description: ValidationCertificate
          example: false
          exampleSetFlag: true
      exampleSetFlag: false
    SelectedEpgEpg:
      title: SelectedEpgEpg
      type: object
      properties:
        details:
          type: array
          exampleSetFlag: true
          items:
            $ref: '#/components/schemas/SelectedEpgEpgBelongsTo'
            exampleSetFlag: false
        epg:
          type: string
          example: epg1
          exampleSetFlag: true
        generatedSgtName:
          type: string
          example: epg1_vn1
          exampleSetFlag: true
      exampleSetFlag: false
    SelectedEpgEpgBelongsTo:
      title: SelectedEpgEpgBelongsTo
      type: object
      properties:
        ap:
          type: string
          example: ap1
          exampleSetFlag: true
        connectionName:
          type: string
          example: ACI1
          exampleSetFlag: true
        epgUsed:
          type: boolean
          example: true
          exampleSetFlag: true
        generatedSgtUsed:
          type: boolean
          example: true
          exampleSetFlag: true
        tn:
          type: string
          example: tenant1
          exampleSetFlag: true
        vn:
          type: string
          example: vn1
          exampleSetFlag: true
      exampleSetFlag: false
    SelectedEpgApplicationProfileResponse:
      title: SelectedEpgApplicationProfileResponse
      type: object
      properties:
        response:
          type: array
          exampleSetFlag: true
          items:
            $ref: '#/components/schemas/SelectedEpgApplicationProfile'
            exampleSetFlag: false
        version:
          type: string
          exampleSetFlag: true
      exampleSetFlag: false
    L3OutsResponse:
      title: L3OutsResponse
      required:
      - response
      - version
      type: object
      properties:
        response:
          type: array
          exampleSetFlag: true
          items:
            $ref: '#/components/schemas/L3Out'
            exampleSetFlag: false
        version:
          type: string
          exampleSetFlag: true
      exampleSetFlag: false
    Epg:
      title: Epg
      type: object
      properties:
        ap:
          type: string
          example: applicationProfile1
          exampleSetFlag: true
        bd:
          type: string
          example: bd1
          exampleSetFlag: true
        conversionWarnings:
          type: array
          description: 'Warnings for EPG to Security Group name conversion:   * `TRUNCATION` - Name is truncated   * `DUPLICATION` - Another EPG was converted to the same name   * `DUPLICATION_ACROSS_CONNECTIONS` - Another EPG was converted to the same name in a other ACI connection   * `CONFLICT` -  Name is different from existing stored entry '
          exampleSetFlag: true
          items:
            type: string
            exampleSetFlag: false
            enum:
            - CONFLICT
            - DUPLICATION
            - DUPLICATION_ACROSS_CONNECTIONS
            - IN_POLICY_USE
            - TRUNCATION
        convertedSgtName:
          type: string
          description: Converted Security Group name
          example: epg1_sg
          exampleSetFlag: true
        dn:
          type: string
          description: dn
          example: uni/tn-tenant1/ap-ap1/epg-epg1
          exampleSetFlag: true
        epg:
          type: string
          example: epg1
          exampleSetFlag: true
        epgNotEsg:
          type: boolean
          example: true
          exampleSetFlag: true
        selected:
          type: boolean
          description: Selected for the connection
          example: true
          exampleSetFlag: true
        sgt:
          type: integer
          description: Security Group Tag
          format: int32
          readOnly: true
          example: 123
          exampleSetFlag: true
        tn:
          type: string
          example: tenant1
          exampleSetFlag: true
        vn:
          type: string
          example: vn1
          exampleSetFlag: true
      exampleSetFlag: false
    StringListResponse:
      title: StringListResponse
      type: object
      properties:
        response:
          type: array
          exampleSetFlag: true
          items:
            type: string
            exampleSetFlag: false
        version:
          type: string
          exampleSetFlag: true
      exampleSetFlag: false