Skip to content

Mattermost

Reads GET /api/v4/config/client?format=old for the version — the same public client-config endpoint a login page needs before any session exists.

targets:
- id: mattermost-main
product: mattermost
address: https://mattermost.example.com

None — the endpoint accepts no credential shape.

The real response is a full client-config dump — a hundred-plus keys, including feature flags, SSO button colors, and genuinely deployment-identifying fields (SiteName, SupportEmail, a telemetry/diagnostic ID, a signing public key). None of that describes the software itself, so only Version and the Build* fields are read.

  • version
  • extra.buildNumber, extra.buildHash

endoflife:mattermost.