401 Unauthorized Error When Accessing Rapid7 InsightVM API (v4)

InsightVM API
1

I am attempting to get a list of assets using the InsightVM Cloud API (v4).

I have generated an API key and authenticated successfully. Some endpoints in v4 work for me such as Get Scans. Others such as Search Assets do not.

When I use the InsightVM web interface, I am able to retrieve the asset list; however, when I connect via the API, I receive an error 401: “An unexpected error occurred. Please contact Rapid7 support.”.

Are there additional permissions I need to have configured for my account in order to access the assets via api? I believe I would be receiving a different 4xx error if this was a formatting issue. (I receive the same error when attempting to retrieve vulnerabilities, as well.)

I am using this endpoint: https://us.api.insight.rapid7.com/vm/v4/integration/assets (I’ve checked to make sure I’m using the right region)

2

I have the same issue here and in order to get what we need is to have an “admin” level permission account. This was the response of Rapid7 Support/engineering team though.

3

I was worried that would be the response from support. Getting admin access is a no go for where I’m at. I’ll need to find a different way.

4

You can’t get the data in any other way, except for generating reports and automatically having them mailed to you.
An integration with a SIEM is fully dependent on the API, which does need admin permissions. I too have raised this issue and stated the current situation in unacceptable. Unfortunately, the best news the engineer had for me was that a feature request exists for this. I do not however have visibility into the progress of this request.