openapi: 3.1.0
info:
  title: Rapid7 API (authentication only)
  version: "0"
  description: "Authentication only. This document describes how to authenticate with the Rapid7 API: its host and an API key sent in the X-Api-Key header. It lists no endpoints. Rapid7 publishes no OpenAPI specification; every value here comes from the vendor's own documentation, cited per value in x-sources. Checked 2026-11-02: /validate refuses a request without credentials (HTTP 401). An API key works only on its own region's host; /validate refused a request without credentials (HTTP 401) on every regional host listed."
x-auth-only: true
x-checked-endpoint: /validate
x-sources:
  server: https://docs.rapid7.com/insight/product-apis/
  auth: https://docs.rapid7.com/insight/api-overview/
servers:
  - url: https://us.api.insight.rapid7.com
    description: US
  - url: https://us2.api.insight.rapid7.com
    description: US2
  - url: https://us3.api.insight.rapid7.com
    description: US3
  - url: https://eu.api.insight.rapid7.com
    description: EU
  - url: https://ca.api.insight.rapid7.com
    description: CA
  - url: https://au.api.insight.rapid7.com
    description: AU
  - url: https://ap.api.insight.rapid7.com
    description: AP
paths: {}
components:
  securitySchemes:
    apiKey:
      type: apiKey
      in: header
      name: X-Api-Key
      description: Insight platform API key
security:
  - apiKey: []