Connector Release 2.13 API

November 17, 2025

Before understanding the API release highlights, learn more about the API server URL to be used in your API requests by referring to the Know Your Qualys API Server URL section. For this API Release Notes, <qualys_gateway_url> is mentioned in the sample API requests.

API Support for Azure Secondary Application

With this release, we have introduced new Azure Connector APIs to resolve the Azure API throttling issues mentioned in Connector Release 2.13. These APIs can help you register and update a secondary application that achieves load sharing and reduces throttling scenarios.

Register Secondary Application

New or Updated API New
API Endpoint /connectors/v1.0/azure/registerSecondaryApplication
Method POST
DTD or XSD changes Not Applicable

This API registers secondary Azure application credentials for one or more Azure connectors. Use this to add secondary app IDs and their secrets for connectors that support multiple application credentials.

Input Parameters

Parameter Mandatory / Optional Type Description
connectorMappings Mandatory Object Map of Azure connector UUIDs to the list of secondary application IDs to be registered. Each key represents a connector ID, and each value is a list of secondary application IDs associated with it.
connectorMappings[].
connectorId
Mandatory String (UUID) Unique identifier of the Azure connector to which the secondary app will be mapped.
connectorMappings[].
appId
Mandatory String (UUID) Secondary Azure Application ID to be linked with the connector.
appCredentials Mandatory Array[Object] List of application credentials containing appId and secretKey for each secondary application.
appCredentials[].
appId
Mandatory String (UUID) Unique identifier of the secondary Azure application.
appCredentials[].
secretKey
Mandatory String Secret key for the Azure application. This value is securely stored and masked in all responses.

SampleSample

API Request

curl --location '<qualys_gateway_url>/connectors/v1.0/azure/registerSecondaryApplication' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer <Bearer Token>' \

Request Body

{
  "connectorMappings": {
    "5dab0fb0-xxxx-xxxx-xxxx-08927bc515ec": ["a2f88fdf-xxxx-xxxx-xxxx-0f4a08195669"],
    "8c2554c4-a852-4631-b5cf-acc93b927340": ["896ead5f-xxxx-xxxx-xxxx-6eff92471959"]
  },
  "appCredentials": [
    { "appId": "a2f88fdf-xxxx-xxxx-xxxx-0f4a08195669", "secretKey": "xxxxxxxxxxxxx" },
    { "appId": "896ead5f-xxxx-xxxx-xxxx-6eff92471959", "secretKey": "xxxxxxxxxxxxx" }
  ]
}

API Response 

{
  "message": "All items processed successfully",
  "successData":{
    "5dab0fb0-xxxx-xxxx-xxxx-08927bc515ec":[ "a2f88fdf-xxxx-xxxx-xxxx-0f4a08195669" ]
  },
  "failures":[]
}

Update Secondary Application

New or Updated API New
API Endpoint /connectors/v1.0/azure/updateSecondaryApplication
Method PUT
DTD or XSD changes Not Applicable

Update existing secondary application credentials (for example, to rotate secret keys). Request structure is identical to register API; updated credentials are validated and tested during processing.

Input Parameters

Parameter Mandatory / Optional Type Description
connectorMappings Mandatory Object Map of Azure connector UUIDs to the list of secondary application IDs to be registered. Each key represents a connector ID, and each value is a list of secondary application IDs associated with it.
connectorMappings[].
connectorId
Mandatory String (UUID) Unique identifier of the Azure connector to which the secondary app will be mapped.
connectorMappings[].
appId
Mandatory String (UUID) Secondary Azure Application ID to be linked with the connector.
appCredentials Mandatory Array[Object] List of application credentials containing appId and secretKey for each secondary application.
appCredentials[].
appId
Mandatory String (UUID) Unique identifier of the secondary Azure application.
appCredentials[].
secretKey
Mandatory String Secret key for the Azure application. This value is securely stored and masked in all responses.

Sample Sample 

API Request

curl --location '<qualys_gateway_url>/connectors/v1.0/azure/updateSecondaryApplication' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer <Bearer Token>' \
        

Request Body

{
  "connectorMappings": {
    "5dab0fb0-xxxx-xxxx-xxxx-08927bc515ec": ["a2f88fdf-xxxx-xxxx-xxxx-0f4a08195669"],
    "8c2554c4-a852-4631-b5cf-acc93b927340": ["896ead5f-xxxx-xxxx-xxxx-6eff92471959"]
  },
  "appCredentials": [
    { "appId": "a2f88fdf-xxxx-xxxx-xxxx-0f4a08195669", "secretKey": "xxxxxxxxxxxxx" },
    { "appId": "896ead5f-xxxx-xxxx-xxxx-6eff92471959", "secretKey": "xxxxxxxxxxxxx" }
  ]
}

API Response 

{
  "message": "All items processed successfully",
  "successData":{
    "5dab0fb0-xxxx-xxxx-xxxx-08927bc515ec":[ "a2f88fdf-xxxx-xxxx-xxxx-0f4a08195669" ]
  },
  "failures":[]
}

List Secondary Application

New or Updated API New
API Endpoint /connectors/v1.0/azure/listSecondaryApplication
Method GET
DTD or XSD changes Not Applicable

Retrieves a list of connectors and their associated secondary application IDs.

Sample Sample 

API Request

curl -X 'GET' \
  '<qualys_gateway_url>/connectors/v1.0/azure/listSecondaryApplication' \
  --header 'Authorization: Bearer <Bearer Token>'

API Response 

[
  {
    "connectorUuid":"8170c663-xxxx-xxxx-xxxx-d99213278f63",
    "appIds":["8845427c-xxxx-xxxx-xxxx-03444a183953"]
  }
]

Delete Secondary Application

New or Updated API New
API Endpoint /connectors/v1.0/azure/deleteSecondaryApplication
Method DELETE
DTD or XSD changes Not Applicable

Removes secondary application IDs from specified connectors.

Sample Sample 

API Request

curl --location --request DELETE '<qualys_gateway_url>/connectors/v1.0/azure/deleteSecondaryApplication' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer <Bearer Token>' \

API Response 

{
  "message": "All items deleted successfully",
  "successData": [
    {
      "connectorUuid":"8170c66-xxxx-xxxx-xxxx-d99213278f63",
      "appIds":[
        "8845427c-xxxx-xxxx-xxxx-03444a183953",
        "7bf626a1-xxxx-xxxx-xxxx-3817b89c5081"
      ]
    }
  ],
  "failures": []
}

 

Sync Secondary Application In Redis

New or Updated API New
API Endpoint /connectors/v1.0/azure/syncSecondaryApplicationInRedis
Method POST
DTD or XSD changes Not Applicable

Triggers synchronization of secondary application metadata into the Redis cache used by connector processing pipelines.

SampleSample

API Request

curl --location --request POST '<qualys_gateway_url>/connectors/v1.0/azure/syncSecondaryApplicationInRedis' \
--header 'Authorization: Bearer <Bearer Token>' \
--header 'Cookie: JSESSIONID=xxxxxx'

API Response

{
  "message": "Successfully synced the secondary application into redis"
}