Custom Assessment and Remediation Release 2.6.1 API
September 02, 2025
Before understanding the API release highlights, learn more about the API server URL to be used in your API requests by referring to the Know Your Qualys API Server URL section. For this API Release Notes, <qualys_base_url> is mentioned in the sample API requests.
Enhanced APIs with New QQL Search Tokens
As a part of QQL token standardization, we have renamed common and CAR-specific tokens. The standardization helps reuse and customize the QQL queries across all Qualys applications, leading to a consistent user experience. The standardized tokens make it easier to copy and reuse the search query from one application to another, eliminating the need to remember multiple token names for different applications and similar searches.
For more information on QQL Token Standardization, refer to Implementation of QQL Token Standardization.
The following list provides the CAR APIs, where the standardized token names can be used in the API request to filter the response:
| API Name | API Endpoint |
|---|---|
| Count Number of Scripts API | GET /sm/v1/script/count |
| Fetch Script Details Based on Script ID or Name API | GET /sm/v1/scripts/{id} |
| List Scripts Based on Script Attributes API | POST /sm/v1/scripts/search |
| Search Custom QID API | POST /sm/v1/qid/search |
| Get Valid Lists of Categories API | GET /sm/v1/script-category |
| Get Valid Lists of Languages API | GET /sm/v1/script-language |
| List Assets API | POST /sm/v1/assets/search |
| Count Number of Assets API | POST /sm/v1/assets/count |
| Fetch Asset Tags List API | POST /sm/v1/assettags/search |
| Add Tags to Lab Asset Tags API | POST /sm/v1/lab-tags |
| Remove Tags from Lab Asset Tags API | POST /sm/v1/lab-tags/delete |
| Search List of Blocked Commands API | POST /sm/v1/block-commands/search |
| List Script Jobs API | POST /sm/v1/jobs/search |
| List Asset Jobs API | POST /sm/v1/assetjobs/search |
| Count Number of Jobs API | GET /sm/v1/jobs/count |
| Count Number of Asset Jobs API | GET /sm/v1/assetjobs/count |
| Fetch Asset Job Details using Job Name or Job ID API | POST /sm/v2/assetjobs/search |
| Fetch Jobs by Script Name or Script ID API | POST /sm/v2/jobs/search |
| List Activity Logs API | POST /sm/v1/scripts/activities |
| Count Number of Schedules API | POST /sm/v1/scheduler/count |
| Search Schedule API | POST /sm/v1/scheduler/search |
| Get Schedule API | GET /sm/v1/scheduler/{id} |
| Fetch List of Scripts from Library API | POST /sm/v1/script-library/search |
| Get the Details of Scripts from Library API | GET /sm/v1/script-library/{id} |
| Fetch Report List API | GET /sm/v1/reports |