List all projects accessible to your API key. Use this to find project IDs needed for other operations.
Discover API endpoints using crawling (`crawlerUrls`) or API definitions (`fileId` from `uploadApiDefinition`). Before running, check if the project already has entrypoints with `listEntrypoints`. For private/local targets, specify a connected repeater via `repeaters`.
Get the current status of a discovery run.
List discovery history for a project. View past discovery runs or monitor ongoing endpoint discovery.
Upload an API definition file (OpenAPI/Swagger) by URL or content. Returns a file ID to reference in discovery runs.
List discovered API endpoints/URLs for a project. Use this to select entrypoints for scans or evaluate attack surface coverage. Supports filtering by HTTP method, status, and text search.
Get detailed information about a specific entrypoint by ID, including headers, body, and configuration.
Add a new entrypoint to a project. Entrypoints define HTTP requests (method, URL, headers, body) that can be used for security scanning.
Update an existing entrypoint. Modify the HTTP request definition, authentication, or repeater settings.
Start a security scan against selected entrypoints. Supports targeting specific entrypoints by ID or by status (e.g., `new`, `changed`, `vulnerable`). Configure which tests to run or use a scan template. For private/local targets, specify a connected repeater.
Get the current status of a running scan.
List scan history for a project. View past scan results or check the status of multiple ongoing scans.
+8 more tools listed on main page