{ "info": { "_postman_id": "0d942b3f-2f82-4ae5-8fb7-7108840e13f3", "name": "Invicti ASPM (Kondukto) REST API v2 Authorization Managers Users API", "description": "Public REST API v2 for the Invicti ASPM platform (formerly Kondukto), an Application Security Posture Management platform that centralizes SAST, DAST, SCA, container and pentest findings from more than eighty scanners. The API manages projects, products, teams, labels, scans and vulnerabilities, and is the same public API the open-source KDT command-line client uses. Assembled by API Evangelist from the per-operation OpenAPI 3.1 definitions Kondukto publishes on each page of its API reference.\n\nContact Support:\n Name: Kondukto Support\n Email: support@kondukto.io", "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json", "createdAt": "2026-07-28T10:57:17.000Z", "updatedAt": "2026-07-28T10:57:17.000Z", "lastUpdatedBy": "35240", "uid": "35240-0d942b3f-2f82-4ae5-8fb7-7108840e13f3" }, "item": [ { "name": "api", "item": [ { "name": "v2", "item": [ { "name": "users", "item": [ { "name": "{userID}", "item": [ { "name": "Get User Details", "id": "1dae9649-86e2-4e3e-a9c2-9b805d48a8ef", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/v2/users/:userID", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "users", ":userID" ], "variable": [ { "id": "e6a2494b-f039-4543-a162-7717248db701", "key": "userID" }, { "id": "ecf18a51-63e2-43ab-862d-ee99e6717baa", "key": "userD", "value": "", "description": "(Required) User ID" } ] }, "description": "Returns a user's details" }, "response": [ { "id": "76e17fd4-6ff1-46b3-8fe1-5b73f0f1e9c1", "name": "200", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/users/:userID", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "users", ":userID" ], "variable": [ { "key": "userID" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"id\": \"\",\n \"username\": \"\",\n \"email\": \"\",\n \"teams\": [\n \"\",\n \"\"\n ]\n}", "createdAt": "2026-07-28T10:57:18.000Z", "updatedAt": "2026-07-28T10:57:18.000Z", "uid": "35240-76e17fd4-6ff1-46b3-8fe1-5b73f0f1e9c1" }, { "id": "05933c85-3027-44f5-8f7d-62c9aaf4126e", "name": "400", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/users/:userID", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "users", ":userID" ], "variable": [ { "key": "userID" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\"\n}", "createdAt": "2026-07-28T10:57:18.000Z", "updatedAt": "2026-07-28T10:57:18.000Z", "uid": "35240-05933c85-3027-44f5-8f7d-62c9aaf4126e" }, { "id": "7415c864-cd87-4600-83a4-7994b92d7daa", "name": "401", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/users/:userID", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "users", ":userID" ], "variable": [ { "key": "userID" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\"\n}", "createdAt": "2026-07-28T10:57:18.000Z", "updatedAt": "2026-07-28T10:57:18.000Z", "uid": "35240-7415c864-cd87-4600-83a4-7994b92d7daa" } ], "createdAt": "2026-07-28T10:57:18.000Z", "updatedAt": "2026-07-28T10:57:18.000Z", "uid": "35240-1dae9649-86e2-4e3e-a9c2-9b805d48a8ef" } ], "id": "7d28129b-4d57-409d-9eb8-63a203a8f656", "createdAt": "2026-07-28T10:57:18.000Z", "updatedAt": "2026-07-28T10:57:18.000Z", "uid": "35240-7d28129b-4d57-409d-9eb8-63a203a8f656" }, { "name": "Get Users", "id": "8e6575b5-37a2-4288-9955-584a674841cd", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/api/v2/users/?start=0&limit=30&q=", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "users", "" ], "query": [ { "description": "Offset for pagination", "key": "start", "value": "0" }, { "description": "How many records will return", "key": "limit", "value": "30" }, { "description": "Username or email (Contains)", "key": "q", "value": "" } ] }, "description": "Return users. Query users by username or email" }, "response": [ { "id": "4b01efa8-5f0d-4440-98c8-ccec48f1c6ca", "name": "200", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/users/?start=0&limit=30&q=", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "users", "" ], "query": [ { "description": "Offset for pagination", "key": "start", "value": "0" }, { "description": "How many records will return", "key": "limit", "value": "30" }, { "description": "Username or email (Contains)", "key": "q", "value": "" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"limit\": 0,\n \"start\": 0,\n \"total\": 0,\n \"users\": [\n {\n \"id\": \"\",\n \"username\": \"\",\n \"email\": \"\",\n \"teams\": [\n \"\",\n \"\"\n ]\n },\n {\n \"id\": \"\",\n \"username\": \"\",\n \"email\": \"\",\n \"teams\": [\n \"\",\n \"\"\n ]\n }\n ]\n}", "createdAt": "2026-07-28T10:57:18.000Z", "updatedAt": "2026-07-28T10:57:18.000Z", "uid": "35240-4b01efa8-5f0d-4440-98c8-ccec48f1c6ca" }, { "id": "b4dc2594-e060-4be5-a162-e27aba0e9868", "name": "401", "originalRequest": { "method": "GET", "header": [ { "description": "(Required) Personal Access Token", "key": "X-Cookie", "value": "" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: apikey", "key": "X-Cookie", "value": "" } ], "url": { "raw": "{{baseUrl}}/api/v2/users/?start=0&limit=30&q=", "host": [ "{{baseUrl}}" ], "path": [ "api", "v2", "users", "" ], "query": [ { "description": "Offset for pagination", "key": "start", "value": "0" }, { "description": "How many records will return", "key": "limit", "value": "30" }, { "description": "Username or email (Contains)", "key": "q", "value": "" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": \"\"\n}", "createdAt": "2026-07-28T10:57:18.000Z", "updatedAt": "2026-07-28T10:57:18.000Z", "uid": "35240-b4dc2594-e060-4be5-a162-e27aba0e9868" } ], "createdAt": "2026-07-28T10:57:18.000Z", "updatedAt": "2026-07-28T10:57:18.000Z", "uid": "35240-8e6575b5-37a2-4288-9955-584a674841cd" } ], "id": "38509550-df13-4d7e-8a83-af9027152ce5", "createdAt": "2026-07-28T10:57:18.000Z", "updatedAt": "2026-07-28T10:57:18.000Z", "uid": "35240-38509550-df13-4d7e-8a83-af9027152ce5" } ], "id": "493b6d1d-6552-482b-8f02-f46dc50b6a0f", "createdAt": "2026-07-28T10:57:18.000Z", "updatedAt": "2026-07-28T10:57:18.000Z", "uid": "35240-493b6d1d-6552-482b-8f02-f46dc50b6a0f" } ], "id": "259c7d6c-329a-4419-acca-992c511869b3", "createdAt": "2026-07-28T10:57:18.000Z", "updatedAt": "2026-07-28T10:57:18.000Z", "uid": "35240-259c7d6c-329a-4419-acca-992c511869b3" } ], "auth": { "type": "apikey", "apikey": [ { "key": "key", "value": "X-Cookie", "type": "string" }, { "key": "value", "value": "{{apiKey}}", "type": "string" }, { "key": "in", "value": "header", "type": "string" } ] }, "variable": [ { "key": "hostname", "value": "api.kondukto.io" }, { "key": "baseUrl", "value": "https://{{hostname}}" } ] }