Create Mitigation Job

For API version information, refer to the API Version History section.

V1.0 | V2.0

V1.0

Use this API to create Windows and Linux Mitigation Jobs. You can create both Run Once and On-Demand jobs using this API.

POST/mtg/v1/deploymentjob

Sample - Create Windows On-Demand Mitigation JobSample - Create Windows On-Demand Mitigation Job

API Request

curl -X 'POST' \
  '<qualys_base_url>/mtg/v1/deploymentjob' \
  -H 'accept: application/json' \
  -H 'Authorization: Bearer <JWT_Token>' \
  -H 'Content-Type: application/json' \
  -d'

API Body

{
    "qids": [
       90007,90043
    ],
    "assetIds": [
        "28e69c01-8e59-4520-83da-a934becf9d88"
    ],
    "assetTagIds":[
        "576b4fab-2682-433e-b3e6-c4ea9861ae75"
    ],
    "name": "Windows_MTG_OnDemand_Job",
    "description": "Test Windows On-Demand Mitigation Job",
    "scheduleType": "On-demand",
    "schemaVersion": "1.0",
    "status": "Enabled",
    "type": "Install",
    "filterType": "Any",
    "exclusionFilterType": "Any",
    "platform": "Windows",
    "notification": {
        "notificationTypes": {
            "email": true
        },
        "notificationConfigs": {
            "recipientEmails": "[email protected],[email protected]",
            "completedPercentage": 80
        },
        "notificationEvents": {
            "onJobStart": true,
            "onJobComplete": true
        }
    }
}'

API Response

{
  "customerId": "bbb55e58-b06f-fd7b-81b8-92a7c5407282",
  "id": "756aa782-8f11-4468-8e68-d1db74c7203e",
  "schemaVersion": "1.0",
  "name": "Windows_MTG_OnDemand_Job",
  "description": "Test Windows On-Demand Mitigation Job",
  "type": "Install",
  "status": "Enabled",
  "coAuthorUserIds": null,
  "scheduleType": "On-demand",
  "startDateTime": "2026-1-23 04:27:51 AM",
  "recurring": false,
  "timezoneType": "SPECIFIC_TZ",
  "timezone": "UTC",
  "createdBy": {
    "user": {
      "id": "f080cf76-0de1-fd80-826c-ea22cf7da868",
      "name": "quaysxkm30",
      "fullName": "John Doe"
    },
    "date": 1769142471331,
    "context": null
  },
  "updatedBy": {
    "user": null,
    "date": null,
    "context": null
  },
  "deletedBy": {
    "user": null,
    "date": null,
    "context": null
  },
  "assetCount": null,
  "taggedAssetCount": 0,
  "applicableAssetCount": 1,
  "totalAssetCount": null,
  "assetResultReceivedCount": null,
  "jobCategory": 3,
  "jobTriggerStatus": null,
  "completionPercent": null,
  "jobSource": 3,
  "readOnly": false,
  "subCategory": "Mitigation",
  "platform": "Windows",
  "assetTagIds": [
    "576b4fab-2682-433e-b3e6-c4ea9861ae75"
  ],
  "assetIds": [
    "28e69c01-8e59-4520-83da-a934becf9d88"
  ],
  "matchAllTagIds": null,
  "exclusionTagIds": null,
  "filterType": "Any",
  "exclusionFilterType": "Any",
  "notification": {
    "notificationTypes": {
      "email": true
    },
    "notificationConfigs": {
      "recipientEmails": "[email protected],[email protected]",
      "completedPercentage": "80"
    },
    "notificationEvents": {
      "onJobStart": true,
      "onJobComplete": true
    }
  },
  "assetDetectionsQQL": "(tags.uuid: [576b4fab-2682-433e-b3e6-c4ea9861ae75]) OR (agentId: [28e69c01-8e59-4520-83da-a934becf9d88]) AND trackingMethod:QAGENT",
  "preDeployActions": [
    {
      "actionId": "1e8b264f-6689-426b-a395-ca288e554781",
      "action": "Apply Mitigation",
      "actionType": "predeploy",
      "params": {
        "timeout": 180,
        "mitigationCategory": "Script-based Virtual Patch",
        "qid": 90007,
        "qidDetectionId": 0,
        "hostVulnId": 0
      },
      "mitigationList": [
        {
          "cves": [
            "90007"
          ],
          "mitigationId": "d7e1f429-e0bd-4aac-83d2-ffabbb25e084",
          "mitigationType": "Registry Update",
          "mitigationSource": null,
          "carScriptId": 263935419,
          "customCdnUrl": "",
          "signatureHashCode": "",
          "impactFactor": 0,
          "implication": 1
        }
      ],
      "actionLinkedToJob": false
    },
    {
      "actionId": "ae7631c7-e0af-441f-81e4-cd88a340ed2e",
      "action": "Apply Mitigation",
      "actionType": "predeploy",
      "params": {
        "timeout": 180,
        "mitigationCategory": "Script-based Virtual Patch",
        "qid": 90043,
        "qidDetectionId": 0,
        "hostVulnId": 0
      },
      "mitigationList": [
        {
          "cves": [
            "90043"
          ],
          "mitigationId": "99138ea7-1f1a-4ec8-a755-927913c3ee11",
          "mitigationType": "Registry Update",
          "mitigationSource": null,
          "carScriptId": 934571954,
          "customCdnUrl": "",
          "signatureHashCode": "",
          "impactFactor": 0,
          "implication": 1
        }
      ],
      "actionLinkedToJob": false
    }
  ],
  "postDeployActions": null,
  "vulnQQL": "vulnerabilities.vulnerability.qid:[90007, 90043]"
}

Sample - Create Windows Run Once Mitigation JobSample - Create Windows Run Once Mitigation Job

API Request

curl -X 'POST' \
  '<qualys_base_url>/mtg/v1/deploymentjob' \
  -H 'accept: application/json' \
  -H 'Authorization: Bearer <JWT_Token>' \
  -H 'Content-Type: application/json' \
  -d'

API Body

{
  "qids": [
    90007,
    90043
  ],
  "assetIds": [
    "28e69c01-8e59-4520-83da-a934becf9d88"
  ],
  "assetTagIds": [
    "576b4fab-2682-433e-b3e6-c4ea9861ae75"
  ],
  "name": "MTG_RunOnce_Job",
  "description": "Test Windows Run-Once Mitigation Job",
  "scheduleType": "Once",
  "schemaVersion": "1.0",
  "startDateTime": "2026-01-23 10:09:58 AM",
  "status": "Enabled",
  "timezone": "Asia/Kolkata",
  "timezoneType": "SPECIFIC_TZ",
  "type": "Install",
  "filterType": "Any",
  "exclusionFilterType": "Any",
  "exclusionTagIds": [],
  "matchAllTagIds": [],
  "coAuthorUserIds": [],
  "platform": "Windows",
  "notification": {
    "notificationTypes": {
      "email": true
    },
    "notificationConfigs": {
      "recipientEmails": "[email protected],[email protected]",
      "completedPercentage": 80
    },
    "notificationEvents": {
      "onJobStart": true,
      "onJobComplete": true
    }
  }
}'

API Response

{
  "customerId": "bbb55e58-b06f-fd7b-81b8-92a7c5407282",
  "id": "d6a2dbae-9f78-4947-9c15-c6dc2a0f56ef",
  "schemaVersion": "1.0",
  "name": "MTG_RunOnce_Job",
  "description": "Test Windows Run-Once Mitigation Job",
  "type": "Install",
  "status": "Enabled",
  "coAuthorUserIds": [],
  "scheduleType": "Once",
  "startDateTime": "2026-01-23 10:09:58 AM",
  "recurring": false,
  "timezoneType": "SPECIFIC_TZ",
  "timezone": "Asia/Kolkata",
  "createdBy": {
    "user": {
      "id": "f080cf76-0de1-fd80-826c-ea22cf7da868",
      "name": "quaysxkm30",
      "fullName": "John Doe"
    },
    "date": 1769143677844,
    "context": null
  },
  "updatedBy": {
    "user": null,
    "date": null,
    "context": null
  },
  "deletedBy": {
    "user": null,
    "date": null,
    "context": null
  },
  "assetCount": null,
  "taggedAssetCount": 0,
  "applicableAssetCount": 1,
  "totalAssetCount": null,
  "assetResultReceivedCount": null,
  "jobCategory": 3,
  "jobTriggerStatus": null,
  "completionPercent": null,
  "jobSource": 3,
  "readOnly": false,
  "subCategory": "Mitigation",
  "platform": "Windows",
  "assetTagIds": [
    "576b4fab-2682-433e-b3e6-c4ea9861ae75"
  ],
  "assetIds": [
    "28e69c01-8e59-4520-83da-a934becf9d88"
  ],
  "matchAllTagIds": [],
  "exclusionTagIds": [],
  "filterType": "Any",
  "exclusionFilterType": "Any",
  "notification": {
    "notificationTypes": {
      "email": true
    },
    "notificationConfigs": {
      "recipientEmails": "[email protected],[email protected]",
      "completedPercentage": "80"
    },
    "notificationEvents": {
      "onJobStart": true,
      "onJobComplete": true
    }
  },
  "assetDetectionsQQL": "(tags.uuid: [576b4fab-2682-433e-b3e6-c4ea9861ae75]) OR (agentId: [28e69c01-8e59-4520-83da-a934becf9d88]) AND trackingMethod:QAGENT",
  "preDeployActions": [
    {
      "actionId": "403055d1-2040-45bc-96d3-6cdf43eb32d3",
      "action": "Apply Mitigation",
      "actionType": "predeploy",
      "params": {
        "timeout": 180,
        "mitigationCategory": "Script-based Virtual Patch",
        "qid": 90007,
        "qidDetectionId": 0,
        "hostVulnId": 0
      },
      "mitigationList": [
        {
          "cves": [
            "90007"
          ],
          "mitigationId": "d7e1f429-e0bd-4aac-83d2-ffabbb25e084",
          "mitigationType": "Registry Update",
          "mitigationSource": null,
          "carScriptId": 263935419,
          "customCdnUrl": "",
          "signatureHashCode": "",
          "impactFactor": 0,
          "implication": 1
        }
      ],
      "actionLinkedToJob": false
    },
    {
      "actionId": "eaf66898-5ef8-415f-8e28-faf40c9c4433",
      "action": "Apply Mitigation",
      "actionType": "predeploy",
      "params": {
        "timeout": 180,
        "mitigationCategory": "Script-based Virtual Patch",
        "qid": 90043,
        "qidDetectionId": 0,
        "hostVulnId": 0
      },
      "mitigationList": [
        {
          "cves": [
            "90043"
          ],
          "mitigationId": "99138ea7-1f1a-4ec8-a755-927913c3ee11",
          "mitigationType": "Registry Update",
          "mitigationSource": null,
          "carScriptId": 934571954,
          "customCdnUrl": "",
          "signatureHashCode": "",
          "impactFactor": 0,
          "implication": 1
        }
      ],
      "actionLinkedToJob": false
    }
  ],
  "postDeployActions": null,
  "vulnQQL": "vulnerabilities.vulnerability.qid:[90007, 90043]"
}

Sample - Create Linux On-Demand Mitigation JobSample - Create Linux On-Demand Mitigation Job

API Request

curl -X 'POST' \
  '<qualys_base_url>/mtg/v1/deploymentjob' \
  -H 'accept: application/json' \
  -H 'Authorization: Bearer <JWT_Token>' \
  -H 'Content-Type: application/json' \
  -d'

API Body

{
    "qids": [
        237627,
        351793
    ],
    "assetTagIds": [
        "576b4fab-2682-433e-b3e6-c4ea9861ae75"
    ],
    "assetIds": [
        "9ed8f61a-61a6-487a-a92a-e163cead65c9"
    ],    
    "name": "MTG_LINUX_ONDEMAND_DEMO_1",
    "description": "Test Linux Mitigation Job",
    "scheduleType": "On-demand",
    "schemaVersion": "1.0",
    "startDateTime": null,
    "status": "Enabled",
    "timezone": null,
    "timezoneType": null,
    "type": "Install",
    "filterType": "Any",
    "exclusionFilterType": "Any",
    "exclusionTagIds": [],
    "matchAllTagIds": [],
    "coAuthorUserIds": [
        "430c474e-2309-47bf-832b-a6e5685c3866"
    ],
    "platform": "Linux",
    "notification": {
        "notificationTypes": {
            "email": true
        },
        "notificationConfigs": {
            "recipientEmails": "[email protected],[email protected]",
            "completedPercentage": 80
        },
        "notificationEvents": {
            "onJobStart": true,
            "onJobComplete": true
        }
    }
}'

API Response

{
  "customerId": "bbb55e58-b06f-fd7b-81b8-92a7c5407282",
  "id": "8d53f5e1-ac9b-4cde-9327-31a2a6f35939",
  "schemaVersion": "1.0",
  "name": "MTG_LINUX_ONDEMAND_DEMO_1",
  "description": "Test Linux Mitigation Job",
  "type": "Install",
  "status": "Enabled",
  "coAuthorUserIds": [
    "430c474e-2309-47bf-832b-a6e5685c3866"
  ],
  "scheduleType": "On-demand",
  "startDateTime": "2025-7-01 10:34:39 AM",
  "recurring": false,
  "timezoneType": "SPECIFIC_TZ",
  "timezone": "UTC",
  "createdBy": {
    "user": {
      "id": "b0f469fe-8f5e-f169-80e1-95e8a728bb5d",
      "name": "quayxxx35",
      "fullName": "John Doe"
    },
    "date": 1751366077652
  },
  "updatedBy": {
    "user": null,
    "date": null
  },
  "deletedBy": {
    "user": null,
    "date": null
  },
  "assetCount": null,
  "taggedAssetCount": 0,
  "applicableAssetCount": 0,
  "totalAssetCount": null,
  "assetResultReceivedCount": null,
  "jobCategory": 3,
  "jobTriggerStatus": null,
  "completionPercent": null,
  "jobSource": 3,
  "readOnly": false,
  "subCategory": "Mitigation",
  "platform": "Linux",
  "assetTagIds": [
    "576b4fab-2682-433e-b3e6-c4ea9861ae75"
  ],
  "assetIds": [
        "9ed8f61a-61a6-487a-a92a-e163cead65c9"
    ],    
  "matchAllTagIds": [],
  "exclusionTagIds": [],
  "filterType": "Any",
  "exclusionFilterType": "Any",
  "notification": {
    "notificationTypes": {
      "email": true
    },
    "notificationConfigs":[email protected],[email protected]",
      "completedPercentage": "80"
    },
    "notificationEvents": {
      "onJobStart": true,
      "onJobComplete": true
    }
  },
  "assetDetectionsQQL": "tags.uuid: [576b4fab-2682-433e-b3e6-c4ea9861ae75] AND trackingMethod:QAGENT",
  "preDeployActions": [
    {
      "actionId": "6a3c52f3-c4cc-4bac-919d-eff19f7704fe",
      "action": "Apply Mitigation",
      "actionType": "predeploy",
      "params": {
        "timeout": 180,
        "mitigationCategory": "Script-based Virtual Patch",
        "qid": 351793,
        "qidDetectionId": 0,
        "hostVulnId": 0
      },
      "mitigationList": [
        {
          "cves": [
            "CVE-2019-9511"
          ],
          "mitigationId": "01914b60-2b11-77c2-870f-64e0baa83fa2",
          "mitigationType": "Uninstall Software",
          "carScriptId": 517143954,
          "customCdnUrl": "",
          "signatureHashCode": "",
          "impactFactor": 100,
          "implication": 1
        },
        {
          "cves": [
            "CVE-2019-9513"
          ],
          "mitigationId": "01914b60-2b11-77c2-870f-64e0baa83fa2",
          "mitigationType": "Uninstall Software",
          "carScriptId": 517143954,
          "customCdnUrl": "",
          "signatureHashCode": "",
          "impactFactor": 100,
          "implication": 1
        }
      ],
      "actionLinkedToJob": false
    },
    {
      "actionId": "5ed22f60-66e1-4fca-bdc1-39dee977a31d",
      "action": "Apply Mitigation",
      "actionType": "predeploy",
      "params": {
        "timeout": 180,
        "mitigationCategory": "Script-based Virtual Patch",
        "qid": 237627,
        "qidDetectionId": 0,
        "hostVulnId": 0
      },
      "mitigationList": [
        {
          "cves": [
            "CVE-2019-9515"
          ],
          "mitigationId": "01914b60-2b11-77c2-870f-64e0baa83fa2",
          "mitigationType": "Uninstall Software",
          "carScriptId": 517143954,
          "customCdnUrl": "",
          "signatureHashCode": "",
          "impactFactor": 100,
          "implication": 1
        },
        {
          "cves": [
            "CVE-2019-9512"
          ],
          "mitigationId": "01914b60-2b11-77c2-870f-64e0baa83fa2",
          "mitigationType": "Uninstall Software",
          "carScriptId": 517143954,
          "customCdnUrl": "",
          "signatureHashCode": "",
          "impactFactor": 100,
          "implication": 1
        },
        {
          "cves": [
            "CVE-2019-9514"
          ],
          "mitigationId": "01914b60-2b11-77c2-870f-64e0baa83fa2",
          "mitigationType": "Uninstall Software",
          "carScriptId": 517143954,
          "customCdnUrl": "",
          "signatureHashCode": "",
          "impactFactor": 100,
          "implication": 1
        }
      ],
      "actionLinkedToJob": false
    }
  ],
  "postDeployActions": null,
  "vulnQQL": "vulnerabilities.vulnerability.qid:[351793, 237627]"
}

Sample - Create Linux Run Once Mitigation JobSample - Create Linux Run Once Mitigation Job

API Request

curl -X 'POST' \
  '<qualys_base_url>/mtg/v1/deploymentjob' \
  -H 'accept: application/json' \
  -H 'Authorization: Bearer <JWT_Token>' \
  -H 'Content-Type: application/json' \
  -d'

API Body

{
    "qids": [
        237627,
        351793
    ],
    "assetTagIds": [
        "576b4fab-2682-433e-b3e6-c4ea9861ae75"
    ],
    "assetIds": [
        "9ed8f61a-61a6-487a-a92a-e163cead65c9"
    ],    
    "name": "MTG_LINUX_RUNONCE_DEMO",
    "description": "Test Linux Mitigation Job",
    "scheduleType": "Once",
    "schemaVersion": "1.0",
    "startDateTime": "2025-07-01 04:13:00 PM",
    "status": "Enabled",
    "timezone": "Asia/Kolkata",
    "timezoneType": "SPECIFIC_TZ",
    "type": "Install",
    "filterType": "Any",
    "exclusionFilterType": "Any",
    "exclusionTagIds": [],
    "matchAllTagIds": [],
    "coAuthorUserIds": [
        "430c474e-2309-47bf-832b-a6e5685c3866"
    ],
    "platform": "Linux",
    "notification": {
        "notificationTypes": {
            "email": true
        },
        "notificationConfigs": {
            "recipientEmails": "[email protected],[email protected]",
            "completedPercentage": 80
        },
        "notificationEvents": {
            "onJobStart": true,
            "onJobComplete": true
        }
    }
}'

API Response

{
  "customerId": "bbb55e58-b06f-fd7b-81b8-92a7c5407282",
  "id": "dc4e0434-3dee-4727-839f-77aabee562bc",
  "schemaVersion": "1.0",
  "name": "MTG_LINUX_RUNONCE_DEMO",
  "description": "Test Linux Mitigation Job",
  "type": "Install",
  "status": "Enabled",
  "coAuthorUserIds": [
    "430c474e-2309-47bf-832b-a6e5685c3866"
  ],
  "scheduleType": "Once",
  "startDateTime": "2025-07-01 04:13:00 PM",
  "recurring": false,
  "timezoneType": "SPECIFIC_TZ",
  "timezone": "Asia/Kolkata",
  "createdBy": {
    "user": {
      "id": "b0f469fe-8f5e-f169-80e1-95e8a728bb5d",
      "name": "quaysxkm35",
      "fullName": "John Doe"
    },
    "date": 1751366517418
  },
  "updatedBy": {
    "user": null,
    "date": null
  },
  "deletedBy": {
    "user": null,
    "date": null
  },
  "assetCount": null,
  "taggedAssetCount": 0,
  "applicableAssetCount": 0,
  "totalAssetCount": null,
  "assetResultReceivedCount": null,
  "jobCategory": 3,
  "jobTriggerStatus": null,
  "completionPercent": null,
  "jobSource": 3,
  "readOnly": false,
  "subCategory": "Mitigation",
  "platform": "Linux",
  "assetTagIds": [
    "576b4fab-2682-433e-b3e6-c4ea9861ae75"
  ],
   "assetIds": [
        "9ed8f61a-61a6-487a-a92a-e163cead65c9"
    ],    
  "matchAllTagIds": [],
  "exclusionTagIds": [],
  "filterType": "Any",
  "exclusionFilterType": "Any",
  "notification": {
    "notificationTypes": {
      "email": true
    },
    "notificationConfigs": {
      "recipientEmails": "[email protected],[email protected]",
      "completedPercentage": "80"
    },
    "notificationEvents": {
      "onJobStart": true,
      "onJobComplete": true
    }
  },
  "assetDetectionsQQL": "tags.uuid: [576b4fab-2682-433e-b3e6-c4ea9861ae75] AND trackingMethod:QAGENT",
  "preDeployActions": [
    {
      "actionId": "125d725b-83d0-4d7a-be28-3f2bf6e9f7e4",
      "action": "Apply Mitigation",
      "actionType": "predeploy",
      "params": {
        "timeout": 180,
        "mitigationCategory": "Script-based Virtual Patch",
        "qid": 351793,
        "qidDetectionId": 0,
        "hostVulnId": 0
      },
      "mitigationList": [
        {
          "cves": [
            "CVE-2019-9511"
          ],
          "mitigationId": "01914b60-2b11-77c2-870f-64e0baa83fa2",
          "mitigationType": "Uninstall Software",
          "carScriptId": 517143954,
          "customCdnUrl": "",
          "signatureHashCode": "",
          "impactFactor": 100,
          "implication": 1
        },
        {
          "cves": [
            "CVE-2019-9513"
          ],
          "mitigationId": "01914b60-2b11-77c2-870f-64e0baa83fa2",
          "mitigationType": "Uninstall Software",
          "carScriptId": 517143954,
          "customCdnUrl": "",
          "signatureHashCode": "",
          "impactFactor": 100,
          "implication": 1
        }
      ],
      "actionLinkedToJob": false
    },
    {
      "actionId": "3ac2490c-83e4-4169-995b-96a58bcc4699",
      "action": "Apply Mitigation",
      "actionType": "predeploy",
      "params": {
        "timeout": 180,
        "mitigationCategory": "Script-based Virtual Patch",
        "qid": 237627,
        "qidDetectionId": 0,
        "hostVulnId": 0
      },
      "mitigationList": [
        {
          "cves": [
            "CVE-2019-9515"
          ],
          "mitigationId": "01914b60-2b11-77c2-870f-64e0baa83fa2",
          "mitigationType": "Uninstall Software",
          "carScriptId": 517143954,
          "customCdnUrl": "",
          "signatureHashCode": "",
          "impactFactor": 100,
          "implication": 1
        },
        {
          "cves": [
            "CVE-2019-9512"
          ],
          "mitigationId": "01914b60-2b11-77c2-870f-64e0baa83fa2",
          "mitigationType": "Uninstall Software",
          "carScriptId": 517143954,
          "customCdnUrl": "",
          "signatureHashCode": "",
          "impactFactor": 100,
          "implication": 1
        },
        {
          "cves": [
            "CVE-2019-9514"
          ],
          "mitigationId": "01914b60-2b11-77c2-870f-64e0baa83fa2",
          "mitigationType": "Uninstall Software",
          "carScriptId": 517143954,
          "customCdnUrl": "",
          "signatureHashCode": "",
          "impactFactor": 100,
          "implication": 1
        }
      ],
      "actionLinkedToJob": false
    }
  ],
  "postDeployActions": null,
  "vulnQQL": "vulnerabilities.vulnerability.qid:[351793, 237627]"
}

V2.0

POST/mtg/v2/deploymentjob

The Create Deployment Job API has been enhanced to allow you to add a maximum of 200 users as co-authors in the job. This enhancement is applicable to Windows and Linux platforms.
In this API, the approvalStatus field in the request indicates the job's approval status throughout the job execution flow. When this field is set to Pending_Approval status, the job is shown at the approver's end and will get executed after it is approved.

Input ParametersInput Parameters

Parameter	Mandatory/ Optional	Data Type	Description
approvalStatus	Optional	String	Specify the job approval status. This parameter indicates the approval status in the Job Approval Flow. When the job is created in disabled state with the approval status as “Pending Approval. The job is executed after approval.

Sample - Create Mitigation Job with Restricted Co-Authors LimitSample - Create Mitigation Job with Restricted Co-Authors Limit

API Request

curl -X 'POST' \
  '<qualys_base_url>/mtg/v2/deploymentjob' \
  -H 'accept: application/json' \
  -H 'Content-Type: application/json' \
  -d

API Body

'{
  {
    "qids": [
        378985,
        90044
    ],
    "assetTagIds": [
        "576b4fab-2682-433e-b3e6-c4ea9861ae75",
        "2f0abeac-8fe5-48a0-aef8-c25bb98ec6f8"
    ],
     "assetIds": [
        "9ed8f61a-61a6-487a-a92a-e163cead65c9"
    ],
    "name": "MTG_WINDOWS_ONDEMAND_DEMO",
    "description": "Test Mitigation Job",
    "scheduleType": "On-demand",
    "schemaVersion": "1.0",
    "startDateTime": null,
    "status": "Enabled",
    "timezone": null,
    "timezoneType": null,
    "type": "Install",
    "filterType": "Any",
    "exclusionFilterType": "Any",
    "exclusionTagIds": [
        "9947851b-017f-4df5-8831-5073392a51c2"
    ],
    "matchAllTagIds": [],
    "coAuthorUserIds": [
        "430c474e-2309-47bf-832b-a6e5685c3866"
    ],
    "platform": "Windows",
    "notification": {
        "notificationTypes": {
            "email": true
        },
        "notificationConfigs": {
            "recipientEmails": "[email protected],[email protected]",
            "completedPercentage": 80
        },
        "notificationEvents": {
            "onJobStart": true,
            "onJobComplete": true
        }
    }
}
}'

API Response

{
    "_error": {
        "code": 500,
        "errorCode": "2435",
        "message": "Co-author limit exceeded. You can add up to 200 co-authors per job"
    }
}

Sample - Create Mitigation Job with Approval Status (Windows)Sample - Create Mitigation Job with Approval Status (Windows)

API Request

curl -X 'POST' \
  '<qualys_base_url>/mtg/v2/deploymentjob' \
  -H 'accept: application/json' \
  -H 'Authorization: Bearer <JWT_Token>' \
  -H 'Content-Type: application/json' \
  -d'

API Body

{
   "approvalStatus":"PENDING_APPROVAL",
    "qids": [
       90007,90043
    ],
    "assetIds": [
        "28e69c01-8e59-4520-83da-a934becf9d88"
    ],
    "assetTagIds":[
        "576b4fab-2682-433e-b3e6-c4ea9861ae75"
    ],
    "name": "Windows_MTG_OnDemand_Job",
    "description": "Test Windows On-Demand Mitigation Job",
    "scheduleType": "On-demand",
    "schemaVersion": "1.0",
    "status": "Enabled",
    "type": "Install",
    "filterType": "Any",
    "exclusionFilterType": "Any",
    "platform": "Windows",
    "notification": {
        "notificationTypes": {
            "email": true
        },
        "notificationConfigs": {
            "recipientEmails": "[email protected],[email protected]",
            "completedPercentage": 80
        },
        "notificationEvents": {
            "onJobStart": true,
            "onJobComplete": true
        }
    }
}'

API Response

{
  "customerId": "bbb55e58-b06f-fd7b-81b8-92a7c5407282",
  "id": "756aa782-8f11-4468-8e68-d1db74c7203e",
  "schemaVersion": "1.0",
  "name": "Windows_MTG_OnDemand_Job",
  "description": "Test Windows On-Demand Mitigation Job",
  "type": "Install",
  "status": "Enabled",
  "coAuthorUserIds": null,
  "scheduleType": "On-demand",
  "startDateTime": "2026-1-23 04:27:51 AM",
  "recurring": false,
  "timezoneType": "SPECIFIC_TZ",
  "timezone": "UTC",
  "createdBy": {
    "user": {
      "id": "f080cf76-0de1-fd80-826c-ea22cf7da868",
      "name": "<username>",
      "fullName": "John Doe"
    },
    "date": 1769142471331,
    "context": null
  },
  "updatedBy": {
    "user": null,
    "date": null,
    "context": null
  },
  "deletedBy": {
    "user": null,
    "date": null,
    "context": null
  },
  "assetCount": null,
  "taggedAssetCount": 0,
  "applicableAssetCount": 1,
  "totalAssetCount": null,
  "assetResultReceivedCount": null,
  "jobCategory": 3,
  "jobTriggerStatus": null,
  "completionPercent": null,
  "jobSource": 3,
  "readOnly": false,
  "subCategory": "Mitigation",
  "platform": "Windows",
  "assetTagIds": [
    "576b4fab-2682-433e-b3e6-c4ea9861ae75"
  ],
  "assetIds": [
    "28e69c01-8e59-4520-83da-a934becf9d88"
  ],
  "matchAllTagIds": null,
  "exclusionTagIds": null,
  "filterType": "Any",
  "exclusionFilterType": "Any",
  "notification": {
    "notificationTypes": {
      "email": true
    },
    "notificationConfigs": {
      "recipientEmails": "[email protected],[email protected]",
      "completedPercentage": "80"
    },
    "notificationEvents": {
      "onJobStart": true,
      "onJobComplete": true
    }
  },
  "assetDetectionsQQL": "(tags.uuid: [576b4fab-2682-433e-b3e6-c4ea9861ae75]) OR (agentId: [28e69c01-8e59-4520-83da-a934becf9d88]) AND trackingMethod:QAGENT",
  "preDeployActions": [
    {
      "actionId": "1e8b264f-6689-426b-a395-ca288e554781",
      "action": "Apply Mitigation",
      "actionType": "predeploy",
      "params": {
        "timeout": 180,
        "mitigationCategory": "Script-based Virtual Patch",
        "qid": 90007,
        "qidDetectionId": 0,
        "hostVulnId": 0
      },
      "mitigationList": [
        {
          "cves": [
            "90007"
          ],
          "mitigationId": "d7e1f429-e0bd-4aac-83d2-ffabbb25e084",
          "mitigationType": "Registry Update",
          "mitigationSource": null,
          "carScriptId": 263935419,
          "customCdnUrl": "",
          "signatureHashCode": "",
          "impactFactor": 0,
          "implication": 1
        }
      ],
      "actionLinkedToJob": false
    },
    {
      "actionId": "ae7631c7-e0af-441f-81e4-cd88a340ed2e",
      "action": "Apply Mitigation",
      "actionType": "predeploy",
      "params": {
        "timeout": 180,
        "mitigationCategory": "Script-based Virtual Patch",
        "qid": 90043,
        "qidDetectionId": 0,
        "hostVulnId": 0
      },
      "mitigationList": [
        {
          "cves": [
            "90043"
          ],
          "mitigationId": "99138ea7-1f1a-4ec8-a755-927913c3ee11",
          "mitigationType": "Registry Update",
          "mitigationSource": null,
          "carScriptId": 934571954,
          "customCdnUrl": "",
          "signatureHashCode": "",
          "impactFactor": 0,
          "implication": 1
        }
      ],
      "actionLinkedToJob": false
    }
  ],
  "postDeployActions": null,
  "vulnQQL": "vulnerabilities.vulnerability.qid:[90007, 90043]"
  "latestApproval": null,
    "approvalStatus": "PENDING_APPROVAL",
}

API Version History

API Version	API Status	Release Date
/mtg/v1/deploymentjob	To be deprecated	July 2026
/mtg/v2/deploymentjob	Active	Feb 2026

Last updated: September, 2026