Things to know before using the API | Fluid Attacks Help

Things to know before using the API

This section will help you use the API, which is built as a GraphQL service where you can consume data using a common query language. GraphQL is a query language for APIs, with a single endpoint which is https://app.fluidattacks.com/api where you can perform requests with Queries to fetch data and Mutations to create, delete, and modify the data you need. If you know how GraphQL works, you can skip ahead to Learn the basics of the Fluid Attacks API.

Here are the recommendations to follow if you are new to GraphQL and want to use the API:

  • The first step is to get some GraphQL knowledge, how it works and how to make queries to a GraphQL endpoint, you can do it in this Introduction in the official GraphQL site.

  • It is recommended that before you face the API, learn how to make Queries and Mutations since these are the basics operations over any GraphQL endpoint.

  • Once you get the basic knowledge about the main GraphQL concepts as Queries, Mutations, Fields, and Arguments, you are ready to explore the API:

    • Go to the API Token post and use Browser method to see info about you (in this case, your role in the application, remember that you have to previously log in on the platform):

      query {
      me {
      role
      }
      }
    • If you want to get info about your groups, you can enhance the previous query to do it so, remember that, since Groups is a list of Project entities, whose are GraphQL entities, you must specify the items that you want from them, in this case, their names:

      query {
      me {
      userEmail
      userName
      }
      }
Free trial message
Free trial
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.