Pause, resume, or stop a scan at its cost limit
Self-hosted only; the route answers 404 elsewhere. Pause and resume apply to running pentests launched with the pause cost policy. resume with max_budget_usd raises the limit before waking the agents, and the new limit must be greater than the actual spend. stop works for any active pentest: the run ends like a cancelled scan, findings and logs are kept, and no report is written.
Authorizations
API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.
Path Parameters
UUID of the scan. Use the id field of a scan from listScans.
Body
pause parks every agent before its next model call. resume wakes them in place; pass max_budget_usd to raise the limit first. stop ends the run: findings and logs are kept, no report is written.
pause, resume, stop New cost limit (USD), resume only. Must be greater than what the scan has already spent.
x <= 1000000Response
Action applied.
Cost-limit state of the run as reported by the engine.
stop, pause Actual LLM spend so far. Calls in flight when the limit was reached finish and are counted, so this can exceed max_budget_usd.
budget_limit, operator, null