Requirements
Connecting Mend takes an active account plus an API access token from your account settings — no other setup is required.[3]
Get your Mend credentials
- Base URLtextRequired
The base URL for your SCA API instance (e.g. https://api-mend.whitesourcesoftware.com).
[1] - EmailemailRequired
The email address associated with your account.
[1] - User KeypasswordRequired
Your personal access token or service user key. For a service user, find it in the SCA App under Admin > Users.
[1] - Organization UUIDtextRequired
Your organization UUID. Find it in the SCA App under Administration > General > Organization UUID. Used in all API paths and token refresh.
[1]
Connect Mend in WEXTL
- Log in to your WEXTL account, add the Mend node module to your workflow, and click Create new credential.
- Optional: In the Credential name field, enter a name for the credential.
- Enter the authentication credentials you copied from your Mend account, or follow the on-screen instructions to create the credential.
- If prompted, authenticate your account and confirm access.
- If you want to make changes to your credential in the future, follow the steps in Manage credentials →

Notes
Credentials are org-scoped; share them with teammates from the Credentials picker on any of its nodes.For detailed information on connecting an application, see Connect an application →
Mend node modules
The list below is a reference of every Mend node module the integration supports. You will be able to pick any of them on the workflow canvas while building automations.
Expand any Mend node module below to see exactly what it takes in, what it returns, and what connection it needs.
Watch IntegrationsTrigger
| Field | Type |
|---|---|
| UUID | text |
| Org UUID | text |
| Status | text |
| Type | text |
| Variant | text |
| Extra data | object |
| Created by | text |
| Creation date | date |
| Last update | date |
Watch LabelsTrigger
| Field | Type |
|---|---|
| UUID | text |
| Namespace | text |
| Value | text |
| Created at | date |
| Created by | text |
| System | boolean |
| Applications | number |
| Projects | number |
| ID | number |
Watch ReportsTrigger
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Watch Zero Day EventsTrigger
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Description | text |
| Published at | date |
| Updated at | date |
Get a Project AI Implementation Finding SnippetAction
Get a Project AI VulnurabilityAction
Get a Project Code FindingAction
| Field | Type |
|---|---|
Project UUIDRequired | choice |
Finding UUIDRequired | text |
| Field | Type |
|---|---|
| Age rating | number |
| Alm issues | object |
| Azure | object |
| Jira | object |
| Jira platform | object |
| App ID | text |
| Baseline | boolean |
| Comments | array |
| Confidence rating | number |
| Correlated dast finding uuids | array |
| Created time | date |
| Description | text |
Get a Report StatusAction
Get a ScanAction
Get a Scan FindingAction
Get a Scan SummaryAction
Get an Application AI VulnurabilityAction
Get Application TotalsAction
Get GroupAction
List Application AI Implementation FindingsSearch
List Application AI ModelsSearch
List Application AI VulnurabilitiesSearch
List Application LabelsSearch
List Application ScansSearch
List Application StatisticsSearch
List Group RolesSearch
List Group UsersSearch
List GroupsSearch
List Image Scan PackagesSearch
List Image Scan Secret FindingsSearch
List Image Scan Security FindingsSearch
List Implementation WeaknessesSearch
List IntegrationsSearch
| Field | Type |
|---|---|
| UUID | text |
| Organization UUID | text |
| Status | text |
| Type | text |
| Variant | text |
| Extra Data | object |
| Created By | text |
| Creation Date | date |
| Last Update | date |
List LabelsSearch
List Project AI Implementation FindingsSearch
List Project AI ModelsSearch
List Project AI TechnologiesSearch
List Project AI VulnurabilitiesSearch
List Project Code FindingsSearch
| Field | Type |
|---|---|
Project UUIDRequired | choice |
| Limit | number |
| Field | Type |
|---|---|
| Age rating | number |
| Alm issues | object |
| Azure | object |
| Jira | object |
| Jira platform | object |
| App ID | text |
| Baseline | boolean |
| Comments | array |
| Confidence rating | number |
| Correlated dast finding uuids | array |
| Created time | text |
| Data flows | array |
List Project Due Diligence InformationSearch
List Project Image Scan PackagesSearch
List Project Image Scan Secret FindingsSearch
List Project Image Scan Security FindingsSearch
List Project In-House LibrariesSearch
List Project LabelsSearch
List Project LibrariesSearch
List Project Library Security FindingsSearch
List Project Root Libraries Security FindingsSearch
| Field | Type |
|---|---|
Project UUIDRequired | choice |
| Zero Day Identifier | text |
| Limit | number |
| Field | Type |
|---|---|
| Root Library Name | text |
| Root Library UUID | text |
| Project | object |
| UUID | text |
| Name | text |
| Path | text |
| Application Name | text |
| Application UUID | text |
| Critical Count | number |
| High Count | number |
| Medium Count | number |
| Low Count | number |
| Total Findings | number |
| Violations | number |
List Project Security FindingsSearch
| Field | Type |
|---|---|
Project UUIDRequired | choice |
| Zero day identifier | text |
| Limit | number |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Type | text |
| Finding info | object |
| Finding status | text |
| Status | text |
| Comment | object |
| Detected at | text |
| Modified at | text |
| Project | object |
| UUID | text |
| Name | text |
| Path | text |
| Application name | text |
| Application UUID | text |
| Application | object |
| UUID | text |
| Name | text |
| Component | object |
| UUID | text |
| Name | text |
| Description | text |
| Component type | text |
| Library type | text |
| Language | text |
| Direct dependency | boolean |
| Root library | boolean |
| References | object |
| Group ID | text |
| Vulnerability | object |
| Name | text |
| Type | text |
| Description | text |
| Score | number |
| Severity | text |
| Publish date | text |
| Modified date | text |
| Vulnerability scoring | array |
| References | array |
| Effective info | object |
| Top fix | object |
| ID | number |
| Vulnerability | text |
| Type | text |
| Origin | text |
| URL | text |
| Fix resolution | text |
| Date | text |
| Message | text |
| Extra data | text |
| Minimal fix version from extra data | text |
List Project StatisticsSearch
| Field | Type |
|---|---|
| Application UUIDs | array |
| value | text |
| Project UUIDs | array |
| value | text |
| Limit | number |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Path | text |
| Application Name | text |
| Application UUID | text |
| Creation Date | date |
| Tags | array |
| Key | text |
| Value | text |
| Labels | array |
| UUID | text |
| Namespace | text |
| Value | text |
| Display Name | text |
| Scope Type | text |
| System | boolean |
| Statistics | object |
List Project TotalsSearch
List Project Totals by DateSearch
List Project ViolationsSearch
List Project Vulnerability TracesSearch
List ProjectsSearch
List ReportsAction
List SBOM Import LogsSearch
List Scan FindingsSearch
List Scan TagsSearch
List ScansSearch
List Source File Match Suggestion by ApplicationSearch
| Field | Type |
|---|---|
Application UUIDRequired | choice |
Source File UUIDsRequired | array |
Recommended For All FilesRequired | boolean |
| Field | Type |
|---|---|
| Library Name | text |
| SHA1 | text |
| Licenses | object |
| License Name | text |
| Severity | text |
| Version | text |
| Owner | text |
| URL | text |
| Release Date | date |
| Non-Official Release | boolean |
| Match Suggestion ID | text |
List Source File MatchesSearch
List Source File Matches by ApplicationSearch
List Source Files InventorySearch
List Source Files Inventory by ApplicationSearch
List Source Files Match SuggestionsSearch
| Field | Type |
|---|---|
Project UUIDRequired | choice |
Source File UUIDsRequired | array |
Recommended For All FilesRequired | boolean |
| Field | Type |
|---|---|
| Library Name | text |
| SHA1 | text |
| Licenses | object |
| License Name | text |
| Severity | text |
| Version | text |
| Owner | text |
| URL | text |
| Release Date | date |
| Non-Official Release | boolean |
| Match Suggestion ID | text |
List UsersSearch
List Zero Day Event FindingsSearch
List Zero Day EventsSearch
Bulk Update Project Code FindingsAction
Bulk Update Project Image Findings StatusAction
Create a Code Organization Compliance Report ExportAction
| Field | Type |
|---|---|
| Name | text |
| Format | choice |
| Send email notification | boolean |
| Labels UUID list | array |
| Exclude inactive projects | boolean |
| Compliance standard | text |
| Report level | text |
| Description | text |
| Additional params | object |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Create a Code Project Compliance Report ExportAction
| Field | Type |
|---|---|
Project UUIDRequired | choice |
| Name | text |
| Format | choice |
| Send email notification | boolean |
| Labels UUID list | array |
| Exclude inactive projects | boolean |
| Compliance standard | text |
| Report level | text |
| Description | text |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Create a Code Project Findings Report ExportAction
| Field | Type |
|---|---|
Project UUIDRequired | choice |
| Name | text |
| Format | choice |
| Send email notification | boolean |
| Labels UUID list | array |
| Exclude inactive projects | boolean |
| Additional params | object |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Create a Code Project Reolved Findings Report ExportAction
| Field | Type |
|---|---|
Project UUIDRequired | choice |
| Name | text |
| Format | choice |
| Send email notification | boolean |
| Labels UUID list | array |
| Exclude inactive projects | boolean |
| From date | date |
| To date | date |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Create a Code Project Suppressions Report ExportAction
| Field | Type |
|---|---|
Project UUIDRequired | choice |
| Name | text |
| Format | choice |
| Send email notification | boolean |
| Labels UUID list | array |
| Exclude inactive projects | boolean |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Create a Compliance Report ExportAction
Create a Due Dilligence Report ExportAction
Create a Findings Report ExportAction
Create a GroupAction
Create a Group RoleAction
Create a Group UserAction
Create a Image Project Due Diligence ReportAction
| Field | Type |
|---|---|
| Project UUID | choice |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | choice |
| Format | choice |
| Scope type | choice |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Create a LabelAction
Create a Project LabelAction
Create a Project SBOM ScanAction
Create a Resolve Findings Report ExportAction
Create a SBOM Report ExportAction
Create a Suppressions Report ExportAction
Create a Test RunAction
Create a UserAction
Create a Users and Groups ReportAction
Create an Account Inventory ReportAction
Create an AI Findings Report ExportAction
Create an AI Inventory Report ExportAction
| Field | Type |
|---|---|
Application UUIDRequired | choice |
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope Name | text |
| Sub Scopes | array |
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope Name | text |
| Title | text |
Report TypeRequired | choice |
FormatRequired | choice |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Create an AI Organization Findings Report ExportAction
| Field | Type |
|---|---|
Application UUIDRequired | choice |
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope Name | text |
| Sub Scopes | array |
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope Name | text |
| Title | text |
| Report Type | choice |
| Format | choice |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Create an AI Organization Inventory Report ExportAction
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope Name | text |
| Sub Scopes | array |
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope Name | text |
| Title | text |
| Report Type | choice |
| Format | choice |
| Scope Type | choice |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Create an AI Project Findings Report ExportAction
| Field | Type |
|---|---|
Project UUIDRequired | choice |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Create an AI Project Inventory Report ExportAction
| Field | Type |
|---|---|
Project UUIDRequired | choice |
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | choice |
| Format | choice |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Create an Application LabelAction
Create an Application SBOM Project ScanAction
Create an Attribution Report ExportAction
Create an Image Organization Attribution Report ExportAction
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | choice |
| Format | choice |
| Scope type | choice |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Create an Image Organization Due Dilligence Report ExportAction
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | choice |
| Scope type | choice |
| Field | Type |
|---|---|
Organization UUIDRequired | text |
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | choice |
Create an Image Organization SBOM Report ExportAction
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | choice |
| Format | choice |
| Scope type | choice |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Create an Image Project Attribution ReportAction
| Field | Type |
|---|---|
Project UUIDRequired | choice |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | choice |
| Format | choice |
| Scope type | text |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Create an Image Project SBOM ReportAction
| Field | Type |
|---|---|
Project UUIDRequired | choice |
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope Name | text |
| Sub Scopes | array |
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope Name | text |
| Title | text |
Report TypeRequired | choice |
FormatRequired | choice |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Create Source File RemappingAction
Create Source File Remapping by OrganizationAction
Delete a GroupAction
Delete a Group RoleAction
Delete a Group UserAction
Delete a LabelAction
Delete a Project LabelAction
Delete a ReportAction
Delete a UserAction
Delete an Application LabelAction
Download a ReportAction
| Field | Type |
|---|---|
Report UUIDRequired | choice |
Export Account Dependency Security Findings by Library ReportAction
Export Account Dependency Security Findings ReportAction
Export Application Due Diligence ReportAction
| Field | Type |
|---|---|
Application UUIDRequired | choice |
| Name | text |
| Format | choice |
| Send email notification | boolean |
| Labels UUID list | array |
| Exclude inactive projects | boolean |
| Project UUIDs | array |
| Additional params | object |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Export Application SBOM ReportAction
| Field | Type |
|---|---|
Application UUIDRequired | choice |
| Name | text |
| Format | choice |
| Send email notification | boolean |
| Labels UUID list | array |
| Exclude inactive projects | boolean |
| Project UUIDs | array |
| Report type | choice |
| Max depth level | number |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Export Project Due Diligence ReportAction
| Field | Type |
|---|---|
Project UUIDRequired | choice |
| Name | text |
| Format | choice |
| Send email notification | boolean |
| Labels UUID list | array |
| Exclude inactive projects | boolean |
| Additional params | object |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Export Project SBOM ReportAction
| Field | Type |
|---|---|
Project UUIDRequired | text |
| Name | text |
| Format | choice |
| Send email notification | boolean |
| Labels UUID list | array |
| Exclude inactive projects | boolean |
| Report type | choice |
| Max depth level | number |
| Include vulnerabilities | boolean |
| Field | Type |
|---|---|
| UUID | text |
| Name | text |
| Scope UUID | text |
| Scope name | text |
| Sub scopes | array |
| Title | text |
| Report type | text |
| Format | text |
| Scope type | text |
Make an API Calluniversal
Update a GroupAction
Update a LabelAction
Update a Project Code FindingAction
Update a Project Image Scan Security Finding StatusAction
| Field | Type |
|---|---|
Project UUIDRequired | choice |
Finding ID (CVE)Required | text |
| Comment | text |
| Package UUID | text |
| Reason | choice |
StatusRequired | choice |
| Vulnerability Name | text |
| Field | Type |
|---|---|
| Applicationuuid | text |
| Comment | text |
| Created at | date |
| Detect time | time |
| Distribution | text |
| Distribution version | text |
| Orguuid | text |
| Package distro ID | number |
Update a Project Package StatusAction
| Field | Type |
|---|---|
Project UUIDRequired | choice |
Package UUIDRequired | text |
StatusRequired | choice |
| Package UUID | text |
| Vulnerability Name | text |
| Reason | choice |
| Comment | text |
| Field | Type |
|---|---|
| Application UUID | text |
| Comment | text |
| Created at | date |
| Detect time | date |
| Distribution | text |
| Distribution version | text |
| Organization UUID | text |
| Package distro ID | number |
Update a User (Block)Action
Update a User (Unblock)Action
Update an Application Violation SLAAction
Update Project Root Library Security FindingAction
| Field | Type |
|---|---|
Project UUIDRequired | choice |
Root Library UUIDRequired | text |
| Status | choice |
| Comment | text |
| Is Violating | boolean |
Templates
Look for Mend templates in the WEXTL template library.
Browse templates →Explore alternative apps
- AWS Cognito[2]Amazon Cognito User Pools — manage users, groups, app clients, and identity providers with SigV4.
- Bunny.netCDN control plane — manage pull zones, storage zones, DNS, video libraries, and cache purge.
- AWS LambdaServerless compute that runs your code without managing servers.
- ClerkAuthentication and user management with sign-in, sign-up, and MFA.
- Azure StorageManage containers and blobs in Azure Blob Storage.
References
- WEXTL® Mend Source Code connector implementation.
- Our users use cases and automations.
- Official API Documentation for Mend.
- WEXTL® visual workflow builder data.
Last updated: Jul 22, 2026 23:18
