API & Application Discovery
Learn API & Application Discovery through Harness University
Prioritize issues, enforce security standards, while maintaining strong, proactive security posture across your application and APIs.
Go to Harness University for the full catalogue of courses and certifications.
Self-Paced Training
Free self-paced courses that you can consume on your own time.
Instructor-Led Training
Intensive two-day courses are designed for engineers looking to deepen their understanding and expertise in Harness.
Certifications
Test and validate your knowledge of Harness by becoming a Harness Certified Expert.
API & Application Discovery - Developer
Product version: API & Application Discovery Paid Plans
Assesses the fundamental skills to manage your posture with API & Application Discovery (Traceable) projects.
Review Study Guide
1. GraphQL-Based Dynamic API Ownership Assignment
Constructing and interpreting GraphQL createPolicy mutations for Static, Dynamic, and Regex-based policy assignments
Configuring RE2 regular expression patterns with specific capture group indices and fallback constants
Managing active ownership policies using getPolicies queries, updatePolicy mutations, and deletePolicies mutations
2. Dynamic Ownership Prerequisites and Operational Mechanics
Configuring authentication prerequisites using JWT tokens and the Authorization: Bearer header
Troubleshooting operational replication latencies and isolating span attributes in the Explorer tab
Assessing the governance trade-offs of automated dynamic policy mapping versus manual, spreadsheet-based ownership assignment
3. Automating API Documentation and Specification Generation
Triggering standard OpenAPI specifications (YAML or JSON) and WSDL schemas (for SOAP APIs) using the createApiDefinition mutation
Applying the learningEndpointStrategy parameters (including MENTION vs. EXCLUDE behaviors) to govern endpoint documentation
Extracting domain-specific scope credentials to parameterize schema generation
4. API Specification Monitoring and Retrieval Workflows
Checking spec generation job statuses using the getApiDefinition query to verify state fields, success states (JOB_STATUS_SUCCESS), timestamps, and error messages
Programmatically downloading completed specification archives (*.zip) using REST GET clients with the Authorization: <Platform_API_Token> header
5. Unified Asset Management and MCP/AI Discovery
Consolidating traditional API Endpoints, AI APIs, and Model Context Protocol (MCP) components into a any single system inventory
Tracking infrastructure health and data flows through core UI widgets and strategic filters
Troubleshooting production failures, diagnosing MCP server downtime, and conducting downstream impact analysis using "Last Called" filters
6. Business-Level Application Grouping and Severity Management
Defining logical application groupings to map technical APIs directly to functional business units
Customizing filtering criteria and severity ratings to prioritize remediation efforts based on business risk
7. Role-Based Access Control (RBAC) and Administration
Enforcing administrative permissions, specifically requiring the Module Level Access -> Discovery -> Settings permission to create and manage application groups and policies
Scoping rules and security policies to "All Environments" versus restricted zones
8. API Discovery Engine Internal Stages and Learning Logic
Modeling endpoint structures by observing URLs, headers, and request/response payloads in live spans
Filtering out malicious or junk traffic by strictly requiring successful HTTP response codes (between 2xx and 3xx) before learning new endpoints
Distinguishing between "Learning" and "Learnt" states in the API Catalog, and managing default state-filtering behavior
Exam Details
The Harness API & Application Discovery Developer Certification exam tests your knowledge and skills of the API & Application Discovery module.
Prerequisites
Basic terminal skills
Basic understanding of Harness and API security.
Exam Details
Exam Duration: 90 minutes
Question Type: Multiple choice
GraphQL-Based Dynamic API Ownership Assignment
20%
Dynamic Ownership Prerequisites and Operational Mechanics
13.3%
Automating API Documentation and Specification Generation
13.3%
API Specification Monitoring and Retrieval Workflows
13.3%
Unified Asset Management and MCP/AI Discovery
16.7%
Business-Level Application Grouping and Severity Management
10%
Role-Based Access Control (RBAC) and Administration
3.4%
API Discovery Engine Internal Stages and Learning Logic
10%
Exam Objectives
Next Steps
The Harness API & Application Discovery Developer exam can start immediately after registering. Please allow up to 90 mins for the exam.
Create an account in Harness University
Register for an exam
Take the exam
API & Application Discovery - Administrator (BETA COMING SOON)
Product version: API & Application Discovery Paid Plans
Assesses the fundamental skills to deploy and maintain API & Application Discovery projects and the overall Harness Platform.
API & Application Discovery - Architect (BETA COMING SOON)
Product version: API & Application Discovery Paid Plans
Assess key technical job functions and advanced skills in design, implementation and management of API & Application Discovery.
Last updated
Was this helpful?