Introduction
Create Token
Tags
Apollo Sandbox

Deprecation Notice

As of 5/20/26, Platform API Hub 2 has been deprecated

NowSecure Platform Previously had two Hubs for REST API endpoints: Hub 1: https://api.nowsecure.com and Hub 2: https://lab-api.nowsecure.com. Hub 2 has been deprecated and all endpoints have been consolidated to the primary Hub, https://api.nowsecure.com. You should expect no interruptions or necessary reconfigurations of your integrations, as all endpoints from lab-api are backwards compatible. In addition, any uses of the "https://lab-api.nowsecure.com" URL in your pipeline will still function as expected.

This change enhances the ease of use of RESTful API calls in Platform, as all endpoints now work with a singular domain and all documentation is located in one Swagger hub using OpenAPI specs.

Introduction

The NowSecure API is available to all customers to programmatically integrate with NowSecure Platform. The Platform API uses a Swagger Hub with OpenAPI specs for all REST endpoints. 

In addition to the RESTful API, NowSecure Platform has a GraphQL Playground, and maintains the documentation on Help Center. For more information, view our GraphQL Apollo Sandbox Overview.

NowSecure API supports requests for analyzing assessment data. To access NowSecure APIs, you must have a NowSecure Platform account. 

Create Token

Please see the Creating a Bearer Token article from within the NowSecure Platform UI.

Tags

The entire Graph should be considered supported unless otherwise annotated (e.g. with depreciated or experimental warnings). Please see the GraphQL Apollo Sandbox- Customizing NowSecure Platform Roles overview for more information on useful queries.

As the GraphQL API structure stabilizes, any Graph nodes we would like to remove will be annotated with a deprecation warning, which should include instructions on where best to query for the relevant data. We will continue to support queries on these deprecated nodes, but using them when authoring new queries in the GraphQL playground, for instance, will issue warnings. While it is not advisable to develop new application logic against deprecated nodes, we will not remove any deprecated nodes/functionality without a great deal of advanced warning. We intend to be extremely conservative about preserving backward-compatibility, warts and all – we consider any breakage of backward-compatibility to be a bug.

Apollo Sandbox

The Apollo GraphQL Sandbox is accessible here: https://api.nowsecure.com/graphql for queries that return more detailed results than the base queries documented on the Help Center. 

Please see our Apollo Sandbox Overview article for more information.