General FAQs

Why does my API source not show any APIs in the API Inventory?

This document is for:

Invicti Enterprise On-Demand, Invicti Enterprise On-Premises

After configuring your API target as a source in Invicti Enterprise, the API Inventory should show your APIs.

Here is an example source configured:

APIs not showing in your API Inventory

If no APIs show up in the API Inventory, like in the following screenshot:

… then the root cause may be one of the following:

Your API target does not contain any Swagger 2 or OpenAPI 3 specifications
Your API target specifications may have syntax issues
Your API target is RAML-based
Your API target is not reachable due to incorrect firewall settings

API source sync failure

If your API source fails to sync, like in the following screenshot:

… then the root cause might be:

authentication issues
network connectivity issues
changes made to your API Discovery configuration

Resolution

For API Discovery to work, it is mandatory for the API specification to be present, in Swagger 2 or OpenAPI3 format. You can check syntax and/or formatting of your specifications with tools, such as this one: https://editor.swagger.io/.

You should also check your authentication credentials and/or parameters configured in your API source; if changes have been made to the source configuration, this may also affect functionality.

If your source requires an API key or client secret, you can also try to regenerate the key or secret and apply the new values to your source.

For instructions on how to configure your firewall with appropriate whitelisting rules (to resolve network connectivity issues):

Invicti Enterprise On-Demand environments:

Invicti Enterprise On-Premises whitelisting instructions

Workarounds

You may be able to overcome some issues by manually exporting your API specifications from your API management platform, and importing them manually into Invicti Enterprise.