> ## Documentation Index > Fetch the complete documentation index at: https://docs.app.strix.ai/llms.txt > Use this file to discover all available pages before exploring further. # List asset discovery runs > Returns the most recent asset discovery runs for the authenticated organization, the run that is in progress, and the verified domains a new run can start from. Asset Discovery is available on the Enterprise plan. For other plans, every `/asset-discovery` route returns 403 with the `feature_not_available` code and the required tier `enterprise`. When Strix cannot verify the plan, every `/asset-discovery` route returns 503 with the `entitlement_unverified` code. Retry the request after the `Retry-After` interval. ## OpenAPI ````yaml /openapi.json get /asset-discovery openapi: 3.1.0 info: title: Strix API version: 1.0.0 description: >- Public REST API for the Strix autonomous penetration testing platform. Manage scans, vulnerabilities, assets, schedules, API tokens, and webhooks. servers: - url: /api/v1 description: Strix v1 API security: - BearerAuth: [] tags: - name: Scans description: Launch, monitor, and manage security scans. - name: Vulnerabilities description: View and triage discovered vulnerabilities. - name: Assets description: Domains and repositories registered for scanning. - name: Schedules description: Recurring scan schedules (Pro plan). - name: Tokens description: Manage API tokens for authentication. - name: Webhooks description: Configure webhook subscriptions for real-time event notifications. - name: Organization description: Workspace configuration for the authenticated organization. - name: Members description: Manage organization members and roles. - name: Invitations description: List and revoke organization invitations. - name: PR Reviews description: Automated security review of pull requests. - name: Connectors description: Network connectors for scanning internal/private targets. - name: Knowledge description: >- Organization knowledge base: documents, policies, and repo profiles that steer the agent. - name: Uploads description: Upload source/code/documentation archives for whitebox scans. - name: Integrations description: Third-party integrations (GitLab, Bitbucket, ticketing). - name: Chat description: Conversational agent sessions. - name: Analytics description: Aggregate dashboard analytics. - name: Test Users description: >- Per-domain test accounts (with optional MFA) the agent authenticates as during scans. - name: License description: Self-hosted license state, entitlements, and aggregate usage. - name: Supply Chain description: >- SBOM inventory, supply-chain findings, scans, and policy for connected repositories. - name: CLI description: >- Device authorization endpoints that let the Strix CLI and coding agents sign in and receive an API token. - name: Billing description: Credit balance, agent-payable top-ups, and automatic top-up settings. - name: Workspaces description: List, create, and switch workspaces. - name: Asset Discovery description: >- Passive reconnaissance runs that map the organization's external attack surface, and the discovered-asset inventory they fill. - name: Run Logs description: Persisted engine logs and the diagnostics bundle of a self-hosted install. paths: /asset-discovery: get: tags: - Asset Discovery summary: List asset discovery runs description: >- Returns the most recent asset discovery runs for the authenticated organization, the run that is in progress, and the verified domains a new run can start from. Asset Discovery is available on the Enterprise plan. For other plans, every `/asset-discovery` route returns 403 with the `feature_not_available` code and the required tier `enterprise`. When Strix cannot verify the plan, every `/asset-discovery` route returns 503 with the `entitlement_unverified` code. Retry the request after the `Retry-After` interval. operationId: listAssetDiscoveryRuns parameters: - name: limit in: query description: >- Maximum number of runs to return. The default is 20 and the maximum is 100. schema: type: integer minimum: 1 maximum: 100 default: 20 responses: '200': description: Recent runs and the seed domains. content: application/json: schema: $ref: '#/components/schemas/AssetDiscoveryRunsResponse' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/TierLimitError' '500': $ref: '#/components/responses/InternalError' '503': $ref: '#/components/responses/ServiceUnavailable' security: - BearerAuth: - discovery:read components: schemas: AssetDiscoveryRunsResponse: type: object properties: runs: type: array items: $ref: '#/components/schemas/AssetDiscoveryRun' live_run: oneOf: - $ref: '#/components/schemas/AssetDiscoveryRun' - type: 'null' description: The run that is pending or running. Null when no run is in progress. seed_domains: type: array items: type: string description: The verified domains a new run can start from. schedule: $ref: '#/components/schemas/AssetDiscoverySchedule' can_schedule: type: boolean description: True when the plan includes recurring discovery runs. required: - runs - live_run - seed_domains - schedule - can_schedule AssetDiscoveryRun: type: object properties: id: type: string format: uuid organization_id: type: string seeds: type: array items: type: string description: The verified domains the run started from. org_names: type: array items: type: string description: >- Organization names used to pivot through certificate subjects and registration data. instructions: type: - string - 'null' description: Extra instructions the agent followed. status: $ref: '#/components/schemas/AssetDiscoveryRunStatus' summary: type: - string - 'null' description: The agent's summary of what it found. Null until the run completes. asset_count: type: integer description: The number of assets the run reported. new_asset_count: type: integer description: The number of hosts this run added that no earlier run had recorded. schedule_id: type: - string - 'null' format: uuid description: >- The recurring schedule that started the run. Null for a run started by hand. failure_code: type: - string - 'null' enum: - launch_failed - no_results - budget_exhausted - other - null description: Why the run failed. Null unless status is `failed`. detail: type: - string - 'null' description: Human-readable failure detail. created_by: type: - string - 'null' created_at: type: string format: date-time queued_at: type: - string - 'null' format: date-time description: When the launch queue accepted the run. started_at: type: - string - 'null' format: date-time finished_at: type: - string - 'null' format: date-time required: - id - organization_id - seeds - org_names - status - asset_count - new_asset_count - created_at AssetDiscoverySchedule: type: object description: >- The organization's recurring discovery settings and notification settings. Each scheduled run starts from every verified domain and costs the same credits as a run started by hand. The notification settings also apply to runs started by hand. properties: cron: type: - string - 'null' description: >- A 5-field cron expression (minute, hour, day of month, month, day of week) read in `timezone`, for example `0 9 * * 1` for every Monday at 09:00. Null when recurring runs are off. timezone: type: string description: >- The IANA timezone the cron expression is read in, for example `America/New_York`. notify_events: type: array items: $ref: '#/components/schemas/AssetDiscoveryNotifyEvent' uniqueItems: true description: >- The outcomes that send a message. An empty list turns notifications off. notify_slack: type: boolean description: Post to Slack through the connected workspace. slack_channel_id: type: - string - 'null' description: >- The Slack channel that gets the post. Null uses the default channel of the Slack integration. notify_emails: type: array items: type: string format: email maxItems: 10 description: Addresses that get an email. next_run_at: type: - string - 'null' format: date-time description: >- When the next scheduled run starts, as a UTC timestamp. Null when `cron` is null. last_fired_at: type: - string - 'null' format: date-time description: When the schedule last started a run. last_run_status: type: - string - 'null' enum: - ok - skipped - failing - null description: The result of the last scheduled fire. last_run_code: type: - string - 'null' description: A short code for the last skipped or failing fire. last_run_error: type: - string - 'null' description: A plain language reason for the last skipped or failing fire. updated_at: type: - string - 'null' format: date-time required: - cron - timezone - notify_events - notify_slack - slack_channel_id - notify_emails - next_run_at - last_fired_at - last_run_status - last_run_code - last_run_error - updated_at ErrorResponse: type: object properties: detail: type: string description: Human-readable explanation of the error. code: type: string description: >- Stable machine-readable error code. `insufficient_scope` means the token does not hold the scope that this endpoint requires. required_scope: $ref: '#/components/schemas/ApiV1Scope' description: >- Scope that the caller must add to the token. Returned with the `insufficient_scope` code. docs: type: string format: uri description: Documentation page that explains how to resolve the error. hint: type: string description: >- One instruction that resolves the error. For `insufficient_scope`, a CLI session gets the `strix cloud session scopes set full` or `strix cloud login --scope-profile full` command, and an API token gets the settings page where the user creates a token with the scope. When the owner's role cannot hold the scope, the hint asks for a role change instead. required: - detail TierLimitErrorResponse: type: object properties: detail: type: string requiredTier: type: string code: type: string required: - detail AssetDiscoveryRunStatus: type: string enum: - pending - running - completed - failed AssetDiscoveryNotifyEvent: type: string enum: - new_assets - completed - failed description: >- An outcome of a discovery run that sends a notification. `new_assets` is a completed run that found assets that were not in the inventory before. `completed` is every completed run. `failed` is a run that stopped without a result. A completed run with new assets sends one message, as `new_assets` when that event is on. ApiV1Scope: type: string enum: - scans:read - scans:write - vulnerabilities:read - vulnerabilities:write - dependencies:read - schedules:read - schedules:write - assets:read - assets:write - organizations:read - organizations:write - members:read - members:write - invitations:read - invitations:write - webhooks:read - webhooks:write - tokens:write - audit:read - pr_reviews:read - pr_reviews:write - connectors:read - connectors:write - knowledge:read - knowledge:write - uploads:write - integrations:read - integrations:write - chat:read - chat:write - scans:message - analytics:read - llm:read - llm:write - test_users:read - test_users:write - discovery:read - discovery:write - license:read - supply_chain:read - supply_chain:write - billing:read - billing:write - logs:read responses: Unauthorized: description: Missing or invalid API token. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' TierLimitError: description: Plan or credit limit reached. content: application/json: schema: $ref: '#/components/schemas/TierLimitErrorResponse' InternalError: description: Internal server error. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' ServiceUnavailable: description: Service unavailable. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' securitySchemes: BearerAuth: type: http scheme: bearer description: >- API token obtained from the Tokens endpoint or CLI device login. Include as `Authorization: Bearer `. Requests made with a managed CLI session also include `X-Strix-Workspace: ` to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch. ````