Get one agent of a scan
Returns one agent with its leads, the findings it filed, its research counters and the first page of its actions, oldest first. Follow continue_cursor in the dashboard for later pages; this endpoint returns only the first page of actions.
Authorizations
API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.
Path Parameters
UUID of the scan. Use the id field of a scan from listScans.
Agent identifier, as agent_id in GET /scans/{scanId}/work.
Response
The agent's state and first page of actions.
The response is of type object.