Automate with APIs

The Remote Access APIs enable you to automate tasks that are usually performed manually in the Remote Access console.

Using the Remote Access APIs

The Remote Access APIs enable you to perform activities on Remote Access resources via a REST Web Service interface. Each Remote Access resource has its own URL path that can be accessed using the relevant HTTPS request verb.

For information about the codes returned by the Remote Access API commands, refer to Return codes.

Service Accounts

A Remote Access Service Account enables you to use the Remote Access API to authenticate to Remote Access and access data. For information about service accounts, how to create them, and how to use them to call Remote Access APIs, see Service accounts.

API versioning

Remote Access offers two sets of APIs:




A set of REST APIs released by CyberArk with official documentation, support, SDK, etc.


A newer version of REST APIs released by CyberArk. This is a POC version and these APIs are subject to change.

You can manually change the version of the selected API by specifying the version to implement in the URL, as shown in the following examples.


Make sure the command specifies the correct data center.

Data center


US data center

EU data center

Canada data center

Australia data center

London data center

India data center

Singapore data center

Return codes

The following table lists all the return codes that are returned from the REST Web Services API.

Return Code

Code Number




The request succeeded. The actual response will depend on the request method used. In a GET request, the response will contain an entity corresponding to the requested resource. In a POST request, the response will contain an entity describing or containing the result of the action.



The request was fulfilled and resulted in a new resource being created.



The request has been accepted for processing, but the processing has not been completed.

No Content


The server successfully processed the request and is not returning any content (no response body). This code is typically returned by DELETE requests.

Bad request


The request could not be understood by the server due to incorrect syntax.



  • The request requires user authentication.

  • Your session has expired and your user has been disconnected



  • The request was valid, but the server is refusing action. The user might not have the necessary permissions for the action.

  • The request was valid, but the usage limit according to the license was reached.

Not Found


The requested resource could not be found, or the user does not have permissions for this resource.

Method Not Allowed


A request method is not supported for the requested resource.

Request Timeout


The request was received by the server, but there was a timeout reaching one of the next components.



The request could not be completed due to a conflict with the current state of the resource.

Internal Server Error


The server encountered an unexpected condition which prevented it from fulfilling the request.