API

Asset Manager exposes two API surfaces for external integrations:

• Read / Write API — Simple REST endpoints for reading and writing assets, types, and properties. Authenticated with an X-API-Key header.

• Bulk Import API — For external systems that need to push large volumes of assets into VSEC with their own hierarchy. Submitted assets land in a pending review state and must be accepted by a VSEC user before they are written to the inventory. Handles deduplication against existing assets automatically.

Authentication

Both APIs accept a provider token generated in Asset Manager → Settings → Providers. Pass it as:

Authorization: Bearer <your_provider_token>

or

x-api-key: <your_provider_token>

See Enrichment → Custom Enrichment Providers for how to generate a token.