Moleant Discover · Developer portal
Moleant Discover API
Moleant Discover keeps an always-current inventory of your organization's assets, software, identities and systems. The Discover API gives your own tools secure, key-based access to the same data.
The API at a glance
- Base URL
https://api.moleant.com/v2/- Authentication
- Organization API key (
X-Api-Keyheader) - Format
- JSON over HTTPS
- Rate limit
- 120 requests per minute per IP address
About Moleant
IT documentation that keeps itself up to date
Moleant AB is a Swedish software company that builds tools for documenting and securing IT environments.
Every IT department knows how quickly documentation falls behind reality. Moleant was started by people who have lived that problem: IT architect Mattias Jadesköld (CEO) and IT security specialist Erik Zalitis (CFO, CISSP and Ethical Hacker). They began developing Moleant's platform in 2018 to collect hardware and software details automatically, while still letting teams add their own documents, responsibilities and descriptions.
Moleant at a glance
- Company: Moleant AB, Sweden
- Product: Moleant Discover, IT asset discovery and documentation
- In development since: 2018
- Leadership: Mattias Jadesköld (CEO) and Erik Zalitis (CFO)
- Platform: Microsoft Azure, with sign-in through Microsoft Entra ID
The product
What is Moleant Discover?
Moleant Discover is a cloud service for IT asset discovery and documentation. Moleant Engine collects hardware, software, identity, network and certificate information from your computers automatically, and Moleant Discover turns it into a shared, up-to-date picture of your IT environment.
Collect
Automatic discovery
Moleant Engine for Windows and Linux inventories hardware, installed software, local and Active Directory accounts, network traffic and certificates, and keeps the picture current without manual work.
Visualize
Documentation in context
Link assets to systems and organizations, record responsibilities in a RACI matrix, add tags, knowledge articles and log entries, and explore it all in reports you can filter and export to PDF or CSV.
Control
Licenses and compliance
Match installed software against purchased licenses to find over- and under-licensing, follow Microsoft 365 license use, and keep SBOM and VEX data for every system.
Built for the people who run IT
- IT operations get accurate, current documentation of every asset and system.
- License managers reconcile installed software with purchased licenses.
- Finance can distribute costs and plan budgets from real data.
Secure by design
Users sign in through Moleant's identity provider, based on Microsoft Entra ID (formerly Azure AD), with multi-factor authentication and role-based permissions per organization. Colleagues get their own account or are invited with an existing Microsoft 365 account.
Moleant Discover is sold as one subscription, currently 1,000 SEK per month for five organizations, 500 assets and 30 users, with a 90-day trial. See pricing and terms.
How it works
From installed agent to usable data in three steps
-
Install Moleant Engine
Download the engine for Windows or Linux from the Engines tab under Settings in Moleant Discover, and install it with your organization's Organization ID.
-
Assets report in
The engine uploads its inventory to the Moleant API, and each computer appears automatically as an asset in your organization.
-
Document and integrate
Work with the data at discover.moleant.com, or read and update it from your own systems through the Discover API.
For developers
The Discover API
A REST API over HTTPS for everything Moleant Discover knows about an organization: assets and their full inventory, systems, logs, files, users, license entitlements, SBOM and VEX data, Microsoft 365 licences and Active Directory. Reads, creates, changes and deletes are plain HTTP methods on /v2/organizations/{CGuid}/… routes. Every request is authenticated with an organization API key, and every response is JSON.
Get an API key
- Sign in to Moleant Discover.
- Open Settings and choose API Keys.
- Select Add API Key, choose the organization and give the key a descriptive name.
- Send the key in the
X-Api-Keyheader on every request (theKeyquery parameter still works).
An API key gives access to its organization's data, including changing and deleting assets. Store it like a password and remove keys you no longer use.
curl -H "X-Api-Key: YOUR_API_KEY" \
"https://api.moleant.com/v2/organizations/YOUR_ORG_ID/systems"
{
"message": "Failure",
"subcode": "Key token invalid or empty.",
"submessage": "None"
}
Endpoints
| Method | Path | Returns or does |
|---|---|---|
| GET | /v2/organizations/ |
The organizations your credential can see, with their ids |
| GET | /v2/organizations/{CGuid}/assets/ |
The assets (computers) of an organization, with filtering, search and paging |
| GET PATCH DELETE | /v2/organizations/{CGuid}/assets/{ServerID}/ |
One asset's full inventory; change its description, environment, state or primary user; delete it |
| GET | /v2/organizations/{CGuid}/assetdetails/ |
The full inventory of every asset in one response |
| GET POST | /v2/organizations/{CGuid}/systems/ |
Systems: groupings of assets for a service or application; add one |
| GET | /v2/organizations/{CGuid}/systems/{SystemID}/logs/ |
Log entries of a system (the organization's own log is under /logs/) |
| GET | /v2/organizations/{CGuid}/masterlog/ |
The 250 most recent audit and log entries of the organization |
| GET | /v2/organizations/{CGuid}/entitlements/ |
License entitlements with installation counts and a compliance verdict |
| GET PUT | /v2/organizations/{CGuid}/systems/{SystemID}/sbom/ |
A system's software bill of materials; upload a CycloneDX XML document |
| GET PUT | /v2/organizations/{CGuid}/systems/{SystemID}/vex/ |
A system's vulnerability exploitability (VEX) document; upload one |
| GET | /v2/organizations/{CGuid}/software/ |
Installed software with installation counts; issues, users, kbs, keys, addressbook and attributes sit next to it |
| POST | /v2/reports/assets/ |
Reports across several organizations: assets, systems, software, issues and users |
Responses
Successful reads return the data as JSON, usually an object keyed by collection. Failures and writes return a status message with message, subcode and submessage; a create also returns the new record's id.
Status codes
200success400validation or authentication failure403a malformed engine token or an unsigned webhook call404unknown route,405wrong method429rate limited503service temporarily unavailable
Rate limiting
Up to 120 requests per 60 seconds per client IP address. Going over blocks the address for five minutes; wait for the time in the Retry-After header before retrying.
Every route, parameter, response field and error is described in the Discover API v2 documentation, the authoritative reference for the API. The routes of the previous v2 (/v2/assets/, /v2/systems/…) keep working.
FAQ
Frequently asked questions
What is Moleant?
Moleant AB is a Swedish software company that builds tools for documenting and securing IT environments. It was founded by IT architect Mattias Jadesköld and IT security specialist Erik Zalitis, and has developed its platform since 2018.
What is Moleant Discover?
Moleant Discover is a cloud service for IT asset discovery and documentation. It automatically inventories hardware, software, identities, network traffic and certificates, and lets IT teams document systems, responsibilities and licenses in one place.
What is Moleant Engine?
Moleant Engine is the agent that collects inventory from your computers and uploads it to Moleant Discover. It is available for Windows and for Linux (DEB and RPM packages), and is installed with your organization's Organization ID.
How do I get an API key?
Sign in to Moleant Discover, open Settings and choose API Keys, then select Add API Key, pick the organization and give the key a name. Send the key in the X-Api-Key header, or as the Key query parameter, on every request.
Where is the API documentation?
The complete Discover API v2 reference, with every operation, parameter, response field and error, is at api.moleant.com/discover-api-v2.html.
What does Moleant Discover cost?
Moleant Discover is sold as one subscription at 1,000 SEK per month, covering five organizations, 500 assets and 30 users, with a 90-day trial. Current terms are at moleant.com/pricing.php.
Is the API rate limited?
Yes. Each client IP address can make 120 requests per 60 seconds. Going over returns HTTP 429 and blocks the address for five minutes; the Retry-After header says when to try again.
Where can I get help?
Guides, knowledge base articles and a support forum are available at support.moleant.com.