Billing

APIs for managing billing contributors

Get Billing Contributors

get

Returns a list of unique repository users who are considered active contributors for billing calculations.

An active contributor is defined as a unique (by email), non-bot human user who has committed code within the last 90 days to a billable, non-archived repository that has at least one security scanner enabled.

Note: You must have the Instance Administrator permissions to run this endpoint.

Required license:

Cortex Cloud Posture Management or Cortex Cloud Runtime Security with Application Security add-on.

Header parameters

AuthorizationstringRequired

{api_key}

Example: your_api_key_here

x-xdr-auth-idstringRequired

{api_key_id}

Example: 1

Responses

200

Ok

application/json

Represents a user associated with a repository.

lastCommitDatestringOptional

The date and time of the user's most recent commit. Used to determine contributor activity. Note: Only users who committed within the last 90 days are considered active contributors for billing.

Example: 2025-02-15T10:30:00.000Z

namestringRequired

The display name of the repository user.

Example: Jane Doe

userNamestringOptional

The username of the repository user on the VCS platform.

Example: janedoe

emailstringRequired

The email address associated with the user. This value is used to uniquely identify contributors across repositories. Emails associated with bots or automated accounts (for example, [e-mail] or *@users.noreply.github.com) are excluded.

Example: [e-mail]

repositoryIdstringRequired

The unique identifier of the repository associated with the user. The repository must be billable (not archived and with at least one security scanner enabled).

Example: a1b2c3d4e5f6a7b8c9d0e1f2

creationDatestringRequired

The date and time when the user record was created in the system.

Example: 2025-06-01T08:00:00.000Z

rolestring · enumOptional

The permission level of the user within the repository.

Example: WRITEPossible values:

hasMfabooleanOptional

Indicates whether the user has multi-factor authentication (MFA) enabled on their VCS account.

Example: true

teamsstring[]Optional

The names of the teams in the VCS organization that the user belongs to.

Example: ["backend-team","security-team"]

isGuestbooleanOptional

Indicates whether the user is a guest (external collaborator) in the repository.

Example: false

isContributorbooleanOptional

Indicates whether the user is an active contributor.

Example: true

isAdminbooleanOptional

Indicates whether the user has admin permissions for the repository.

Example: false

emailOriginstring · enumOptional

The source from which the user's email address was obtained.

Example: GITPossible values:

uniqueVcsIdstringOptional

A unique identifier assigned to the user by the VCS platform. Used to correlate the user across repositories and systems.

Example: vcs-user-67890

400

Bad Request - The request was malformed or contains invalid parameters.

application/json

401

Unauthorized - The request is unauthenticated. Pass the correct auth credentials.

application/json

403

Forbidden - Access to the resource is prohibited. Try with different auth credentials.

application/json

404

Not Found - The requested resource could not be found.

application/json

500

Internal Server Error

get/public_api/appsec/v1/billing/contributors

GET /public_api/appsec/v1/billing/contributors HTTP/1.1
Host: api-yourfqdn
Authorization: your_api_key_here
x-xdr-auth-id: 1
Accept: */*

[
  {
    "name": "Jane Doe",
    "userName": "janedoe",
    "email": "[e-mail]",
    "repositoryId": "a1b2c3d4e5f6a7b8c9d0e1f2a",
    "creationDate": "2025-06-01T08:00:00.000Z",
    "lastCommitDate": "2025-02-15T10:30:00.000Z",
    "role": "WRITE",
    "hasMfa": true,
    "teams": [
      "backend-team",
      "security-team"
    ],
    "isGuest": false,
    "isContributor": true,
    "isAdmin": false,
    "emailOrigin": "GIT",
    "uniqueVcsId": "vcs-user-67890"
  },
  {
    "name": "John Smith",
    "userName": "johnsmith",
    "email": "[e-mail]",
    "repositoryId": "repo-xyz-67890",
    "creationDate": "2025-03-15T12:00:00.000Z",
    "lastCommitDate": "2025-01-20T14:45:00.000Z",
    "role": "DEVELOPER",
    "hasMfa": false,
    "teams": [
      "frontend-team"
    ],
    "isGuest": false,
    "isContributor": true,
    "isAdmin": false,
    "emailOrigin": "API",
    "uniqueVcsId": "vcs-user-11223"
  }
]