List scans
Returns a paginated list of scans for the authenticated organization. Each scan carries finding counts. A pentest’s counts omit dependency CVE findings. A supply-chain scan’s findings are all dependency CVEs, so its counts are nonzero only when the token also holds the dependencies:read scope.
Authorizations
API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.
Query Parameters
Page number of the result set. The first page is 1.
x >= 1Maximum number of items per page. The default is 20 and the maximum is 100.
1 <= x <= 100Return only scans in this status.
pending, running, completed, failed, cancelled Return only scans of this type. whitebox scans include source code, blackbox scans test targets externally.
whitebox, blackbox Filter scans created on or after this date (ISO 8601).
Filter scans created on or before this date (inclusive, end-of-day).
Return only scans that target this domain UUID.
Return only the scans that include this repository.
Case-insensitive substring match on the scan title.
Include per-finding retest scans in the results. Excluded by default, matching the dashboard pentest list.
Field to sort by. Only created_at is supported.
created_at Sort direction. Use asc for oldest first or desc for newest first.
asc, desc