Get plan limits and usage

GET

/v1/workspace/usage

const url = 'https://api.devsecure.io/v1/workspace/usage';
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://api.devsecure.io/v1/workspace/usage \
  --header 'Authorization: Bearer <token>'

The workspace’s effective plan, its feature flags and the scan count for the current billing period. A cancelled or missing subscription counts as the Free plan, as in the dashboard.

Authorizations

ApiKey
usage:read
OAuth2
usage:read

Responses

200

OK.

application/json

Usage

object

plan

required

UsagePlan

object

name

required

Name

string

features

required

PlanFeatures

object

github_scans

required

Github Scans

boolean

gitlab_scans

required

Gitlab Scans

boolean

bitbucket_scans

required

Bitbucket Scans

boolean

upload_scans

required

Upload Scans

boolean

dast_scans

required

Dast Scans

boolean

container_scans

required

Container Scans

boolean

pentests

required

Pentests

boolean

upload_size_limit_mb

required

Any of:

integer
null

integer

subscription_status

Any of:

string
null

string

period

required

BillingPeriod

object

start

Any of:

string
null

string

end

Any of:

string
null

string

cancel_at_period_end

Cancel At Period End

boolean

scans

required

ScanUsage

object

used

required

Used

integer

limit

required

Any of:

integer
null

integer

remaining

required

Any of:

integer
null

integer

seats

required

SeatUsage

object

purchased

required

Purchased

integer

members

required

Members

integer

Example

{
  "subscription_status": "active",
  "period": {
    "cancel_at_period_end": false
  }
}

Headers

X-Request-ID

string

Identifies the request; quote it to support.

X-RateLimit-Limit

integer

Requests allowed per window.

X-RateLimit-Remaining

integer

Requests left in the window.

X-RateLimit-Reset

integer

Seconds until the window resets.

400

The request is not valid (validation_error, invalid_cursor).

application/json

ErrorEnvelope

object

error

required

ErrorBody

object

code

required

Code

string

message

required

Message

string

request_id

required

Any of:

string
null

string

details

Any of:

Array<object>

ErrorDetail

object

field

Any of:

string
null

string

message

required

Message

string

Example

{
  "error": {
    "code": "validation_error",
    "message": "The request is not valid.",
    "request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
  }
}

Headers

X-Request-ID

string

Identifies the request; quote it to support.

401

Missing, unknown, expired or revoked credential (invalid_credentials).

application/json

ErrorEnvelope

object

error

required

ErrorBody

object

code

required

Code

string

message

required

Message

string

request_id

required

Any of:

string
null

string

details

Any of:

Array<object>

ErrorDetail

object

field

Any of:

string
null

string

message

required

Message

string

Example

{
  "error": {
    "code": "invalid_credentials",
    "message": "The credential is missing, invalid, expired or revoked.",
    "request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
  }
}

Headers

X-Request-ID

string

Identifies the request; quote it to support.

403

The credential may not do this (insufficient_scope, permission_denied, plan_not_allowed, quota_exceeded, target_not_authorized).

application/json

ErrorEnvelope

object

error

required

ErrorBody

object

code

required

Code

string

message

required

Message

string

request_id

required

Any of:

string
null

string

details

Any of:

Array<object>

ErrorDetail

object

field

Any of:

string
null

string

message

required

Message

string

Example

{
  "error": {
    "code": "insufficient_scope",
    "message": "The credential does not have the scope this operation needs.",
    "request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
  }
}

Headers

X-Request-ID

string

Identifies the request; quote it to support.

429

Too many requests (rate_limited).

application/json

ErrorEnvelope

object

error

required

ErrorBody

object

code

required

Code

string

message

required

Message

string

request_id

required

Any of:

string
null

string

details

Any of:

Array<object>

ErrorDetail

object

field

Any of:

string
null

string

message

required

Message

string

Example

{
  "error": {
    "code": "rate_limited",
    "message": "Too many requests. Retry after the time in Retry-After.",
    "request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
  }
}

Headers

X-Request-ID

string

Identifies the request; quote it to support.

X-RateLimit-Limit

integer

Requests allowed per window.

X-RateLimit-Remaining

integer

Requests left in the window.

X-RateLimit-Reset

integer

Seconds until the window resets.

Retry-After

integer

Seconds to wait before retrying.

500

Unexpected error (internal_error). Quote the request id to support.

application/json

ErrorEnvelope

object

error

required

ErrorBody

object

code

required

Code

string

message

required

Message

string

request_id

required

Any of:

string
null

string

details

Any of:

Array<object>

ErrorDetail

object

field

Any of:

string
null

string

message

required

Message

string

Example

{
  "error": {
    "code": "internal_error",
    "message": "Something went wrong on our side.",
    "request_id": "req_3f0c2a9d5b6e4f7a8c1d2e3f4a5b6c7d"
  }
}

Headers

X-Request-ID

string

Identifies the request; quote it to support.