--- title: Patch Management API slug: neurons-api/patch-management-api createdAt: 2026-08-19T08:34:10.088Z --- This guide describes the basic information you need to get up and running with the Ivanti Neurons for Patch Management API. It is assumed that you have some prior experience using a REST API. The Ivanti Neurons for Patch Management API provides access to the Patch Management feature in Ivanti Neurons. The API is used to support the use of third-party reporting tools. ## Available Endpoints The following are the endpoints with which you can interact. - [authentication](docId\:fWNkugow-caPxAmmKlS9j): Enables you to retrieve the JWT access token. - [cve](docId\:VWzHdvV7uiw8NtwjuUZ3p): Enables you to retrieve the set of data items that represents a CVE and its related metadata. - [cves-to-patch-group](docId\:d4wmdcyiavkZ5ZFvK82KD): Enables you to specify CVE IDs that you want to convert to a patch group. - [deployment-history](docId\:jN8hLHRRCOm3BhAhK9bMA): Enables you to retrieve the set of data items that represents a deployment history result. - [endpoint-vulnerability](docId\:JmRMu2doo75mhqjwQfla8): Enables you to retrieve the set of data items that represents an Endpoint Vulnerability device overview. - [notification](docId\:Mjf7s-U4YmNDNQX6GRhmi): Enables you to retrieve the set of data items that represents a notification result, such as a security bulletin. - [patch](docId\:ZrTaYnkOHm7gEw9DY-0h5): Enables you to retrieve the set of data items that represents a patch and its related metadata. - [patch-group](docId\:gS2EpuMyT4SiiV8B9pVw9): Enables you to retrieve the set of data items that represents a patch group and its related metadata. - [patch-group-audit](docId\:I2X-790yqkL5_KWtB33HL): Enables you to retrieve the set of data items that represents all changes that have occurred to a given patch group. ### Rate Limit and Requests Neurons for Patch Management supports a rate limit of 150 requests per minute. The number of requests are limited to 172,800 per day. ## Relationships The return code from certain calls can contain data that is related to other areas in the API. The following data fields have relationships with other endpoints. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/0qyxhPzcDEesgqHNSoHd-_patch-management-api-relationships.png" alt="Ivanti Neurons Patch Management API relationship diagram" position="flex-start" size="62" width="615" height="1001" initialPath="Images/Patch-Management-API-Relationships.png" githubPath="Patch-Mgmt/Images/Patch-Management-API-Relationships.png" showCaption="false"} | Endpoint | Related Output Data Item | | ---------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | [cve](docId\:VWzHdvV7uiw8NtwjuUZ3p)

**cveId** is the primary key in this collection | **notificationsAffected**: The [notification endpoint](docId\:Mjf7s-U4YmNDNQX6GRhmi) can be used to query for additional details related to the notification ID.
**patchesAffected**: The [patch endpoint](docId\:ZrTaYnkOHm7gEw9DY-0h5) can be used to query for additional details related to specific patches. | | [deployment-history](docId\:jN8hLHRRCOm3BhAhK9bMA)

**deploymentId** is the primary key in this collection | **discoveryId**: The [People and Devices API](docId\:hulJl3LwDRYSF3kqiheG_) can be used to query for additional details about the users and devices.
**notificationId**: The [notification endpoint](docId\:Mjf7s-U4YmNDNQX6GRhmi) can be used to query for additional details related to the notification ID.
**patchId**: The [patch endpoint](docId\:ZrTaYnkOHm7gEw9DY-0h5) can be used to query for additional details related to the patch ID. | | [endpoint-vulnerability](docId\:JmRMu2doo75mhqjwQfla8)

**discoveryId** is the primary key in this collection | **discoveryId**: The [People and Devices API](docId\:hulJl3LwDRYSF3kqiheG_) can be used to query for additional details about the users and devices.
**notificationsAffected**: The [notification endpoint](docId\:Mjf7s-U4YmNDNQX6GRhmi) can be used to query for additional details related to the notification ID.
**patchesAffected**: The [patch endpoint](docId\:ZrTaYnkOHm7gEw9DY-0h5) can be used to query for additional details related to specific patches.
**deviceStatus.devicePatchSummaries.patchId**: The [Patch endpoint](docId\:ZrTaYnkOHm7gEw9DY-0h5) can be used to query for additional details.
**deviceStatus.devicePatchSummaries.notificationId**: The [notification endpoint](docId\:Mjf7s-U4YmNDNQX6GRhmi) can be used to query for additional details. | | [notification](docId\:Mjf7s-U4YmNDNQX6GRhmi)

**notificationId** is the primary key in this collection | **cves**: The [cve endpoint](docId\:VWzHdvV7uiw8NtwjuUZ3p) can be used to query for the list of CVEs addressed in the notification.
**cvesExploited**: The [cve endpoint](docId\:VWzHdvV7uiw8NtwjuUZ3p) can be used to query for collection of exploited CVEs. | | [patch](docId\:ZrTaYnkOHm7gEw9DY-0h5)

**patchId** is the primary key in this collection | **cveExploited**: The [cve endpoint](docId\:VWzHdvV7uiw8NtwjuUZ3p) can be used to query for additional details about the CVEs.
**deploymentId**: The deployment-history endpoint can be used to query for additional details related to the deployment ID.
**notificationIds**: The [notification endpoint](docId\:Mjf7s-U4YmNDNQX6GRhmi) can be used to query for additional details related to the notification IDs. | | [patch-group](docId\:gS2EpuMyT4SiiV8B9pVw9)

**patchGroupId** is the primary key in this collection | **patchIds**: The [patch endpoint](docId\:ZrTaYnkOHm7gEw9DY-0h5) can be used to query for additional details related to specific patches. | | [patch-group-audit](docId\:I2X-790yqkL5_KWtB33HL)

This collection uses a composite natural key, each row is a unique document | **patchGroupId**: The [patch-group endpoint](docId\:gS2EpuMyT4SiiV8B9pVw9) can be used to query for additional details related to the parent patch group.
**patchUid**: The [patch endpoint](docId\:ZrTaYnkOHm7gEw9DY-0h5) can be used to query for additional details related to the specific patch.
**notificationId**: The [notification endpoint](docId\:Mjf7s-U4YmNDNQX6GRhmi) can be used to query for additional details related to the notification ID. | ## HTTP/HTTPS Methods The following methods are currently supported and are used to denote actions against a resource. - GET: Reads a resource - POST: Creates a new resource - PUT: Updates an entire resource ## Standard Status Codes Conventional HTTP/HTTPS status codes are used to indicate the success or failure of an API request. - 200 indicates a successful response - 400 indicates a validation error has occurred. For more detailed information, see [Response Codes](docId\:z9v2-vzSpbwbNzSW_nD_M). - 401 indicates the requestor is not authorized - 500 indicates an unexpected server error